last executing test programs: 1m9.175009347s ago: executing program 0 (id=121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000540), 0x2400, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x70, 0xf0, 0x1c, 0x40, 0xfe9, 0xdb98, 0xad73, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x97, 0x0, 0x0, 0xe8, 0x6, 0x1d}}]}}]}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef0f212666b94006000066b80000010066ba000000000f211a2e0f013c", 0x34}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect(0x5, 0xc4a, &(0x7f0000000900)=ANY=[@ANYBLOB="120100021e9a2520cd0c38004fef010203010902380c020601200709045b070a945f8e010a2401feffa10201020d2408040000"], &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x6, 0x7f, 0x3, 0x40, 0x5}, 0x32, &(0x7f0000000480)=ANY=[@ANYBLOB="0503fcff0320100c687531fa000fff10000fc00000f0c0ff0011ffff0000c000000000ff0003100b0710021461080003100b2def7b451953c0034aec196c0aa2cbe24835b510679eedcb316bcdbdc5e6fc8937e63a48447598d75ccdf0cac67c28ca72f5b7c8d67cffce84245ea36d4efba6d6345e0b3db6b6"], 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c01}}]}) 1m7.649322565s ago: executing program 0 (id=126): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1002) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2c, &(0x7f0000000000)=0x1000, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r1, r0, 0x0) r3 = socket(0x11, 0x2, 0x0) syz_usb_connect(0x2, 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008427d120b7201307ba3a0102030109026f0001000010000904"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) r6 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0xf0667000) r7 = socket(0x28, 0x5, 0x4) bind$vsock_stream(r7, &(0x7f0000000040), 0x10) listen(r3, 0x1) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="140700080000000000000000000000000200000a"], 0x14}, 0x1, 0x0, 0x0, 0x24080040}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000240)=0x14) sendmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000), 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000), 0x8) ppoll(&(0x7f00000001c0)=[{r6, 0x20}], 0x1, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x1) 1m4.292504922s ago: executing program 0 (id=136): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x1}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ac05470200000000000109022400010080a0030904004001030002000921feff0001220c09090581030004ac00fa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x3e, 0x0, &(0x7f0000000140)=0xff64) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="40031600000016304ff6"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m2.914196594s ago: executing program 0 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024f01c173a49b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000040)={&(0x7f0000000000)=""/60, 0x3c}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 1m2.853214361s ago: executing program 0 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='mpol=bind:0-N:N/N']) 1m2.550353945s ago: executing program 0 (id=148): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2004}) poll(&(0x7f0000000340)=[{r3, 0x1000}], 0x1, 0x2) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 1m2.263935608s ago: executing program 32 (id=148): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2004}) poll(&(0x7f0000000340)=[{r3, 0x1000}], 0x1, 0x2) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 8.567136489s ago: executing program 4 (id=390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000200)={r2}, &(0x7f0000000100)=0x8) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x63, 0x2}, @period={0x58, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x4, 0xa3f9, 0x8, 0x7e7, 0x60, 0x5, 0x9}, &(0x7f00000000c0)=0x9c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0xfffffffffffffc7c, r6, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x8140) 8.452158735s ago: executing program 4 (id=391): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 8.160416715s ago: executing program 4 (id=394): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'hsr0\x00'}}, 0x1e) syz_usb_connect(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40040904000702b95fc30309058803200006020409058302"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 5.09841306s ago: executing program 4 (id=408): socket$kcm(0x10, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000580)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x14, 0x2c, 0xfb795c3c65a63620, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}}}}, 0x46) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000001a80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="5d4524bd70a0fedbdf25010000000c00020000018008000100ce7751afce6510afc789d5a3a4e4b9158fcae63a859a4da84b1987af2ee5bb4d3b417cf48102a99376d446a1", @ANYRES32=r4, @ANYBLOB="0c0005004601000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000980)={0x4c, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xb99}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8b}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '1\xba\xf8\xee\x8c'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x40) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newtaction={0x730, 0x30, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{0x71c, 0x1, [@m_ipt={0x718, 0x8, 0x0, 0x0, {{0x8}, {0x120, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xe8, 0x6, {0x4, 'security\x00', 0x57, 0x1, "b87b840a82c7473ff08d6b06b7f9b30711aec403fa56851653c331143898e4b570d3abbdb870f266aa86b6f05dfad708b6fb834cb1f89a217b5caeb45de7db19630178a0034cfd16b898c8367d32f9265d05d50dbed7e6ad8cd1b4e37c3a1e4424744d9249ac04071c47a9767e02a1ad68fb3bcb72c1fe1ce94069b2d93c5e45af1e52b3cd6c419d8c6d494873bcfa17746354d43ecf01ecc2de9a1714ada5d32b8858050de4952c09550bd36595e0cffc7d45d82ebe8751ef40d3b96ed2"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x5d1, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x730}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) read$alg(r7, &(0x7f0000000a00)=""/4087, 0xff7) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) r9 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r9, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r9, 0x0, 0x0) syz_usb_control_io$lan78xx(r9, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r9, 0x0, 0x0) syz_usb_control_io$lan78xx(r9, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000180)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r9, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000e00)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0x12, 0x38}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000002c0)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.510889057s ago: executing program 2 (id=422): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_clone3(&(0x7f0000000980)={0x200, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/147, 0x93}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 2.440814826s ago: executing program 2 (id=423): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005200016d9bffffff000000000a"], 0x18}}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcb8a}, 0x1c) 2.343922547s ago: executing program 2 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="0c31d9c6d0494f28b18059bfa98d9f11e81d17fb195ea8801fd043b5b8ea1c3f6ab43c7bbb462327a797ee1c18f63ba3d95b5641a0ae4ed28f9c8ad23738fc4d752e8fc1f64e942f185bbef2aaf472db04", 0x51}], 0x1) 2.283520623s ago: executing program 2 (id=425): mprotect(&(0x7f00001ad000/0x4000)=nil, 0x4000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000000000)=0x3, 0x4) madvise(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0xd) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40505330, &(0x7f0000000940)={{0xee}}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000000)=0x10000, 0x4) close_range(r0, r0, 0x0) 2.132315091s ago: executing program 2 (id=426): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = syz_open_dev$media(&(0x7f0000000040), 0x1, 0x8ec00) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) shutdown(r1, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20004810, 0x0, 0x0) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000240)='Z/{\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="100000dbdfdf00"/16], 0x10}}, 0x0) recvmsg(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x86040, 0x0) r8 = eventfd2(0x80009, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) r10 = eventfd2(0x9, 0x0) io_submit(0x0, 0x9, &(0x7f0000000ac0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x400, r0, &(0x7f0000000200)="23eab54f05fc56205d7b43fb2ff586a154284a8f", 0x14, 0x8, 0x0, 0x1, r4}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000380)="0bc659c7a465e32baa3b21", 0xb, 0x182000}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xd5, r6, &(0x7f0000000400)="eb35decc8878647a484a25c77e04f2835118a3d58e5c671b9d4d78b526b2db5282577b59e31f2725bbd6efb590b68a225a9b010316dafb1e95b83be5f40add5b74e5067e521f3acb566e5d134694198dcde1673eaad7943c138a807c093c7b020b49b45f037b58f222a4c2dfc5c8598e2ab0ba62c61a511f0699705798383d9e471dbd2eee", 0x85, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x27, 0xffffffffffffffff, &(0x7f0000000580)="d7c4712ba8133a1b27d80435b7de50513102a5f75f4bb8a0adde47885d30afdfda129c", 0x23, 0x3ff, 0x0, 0x2, r7}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x401, r2, &(0x7f0000000640)="5cbf7d6d3b72b5269820f91d93f838d2bcaa11a6e344ae2fc11e2f6b38940eee9bb4b4b8c0d5b0089fa3e32838c0fc88c2a98941a469295f7ba92155a9939e7e95ad164667e66dae5cfd9efa5f5422ec2d339e10c22a2224512a49139d4c23e5b549fe41769cb428c2bcfa3cb873c45ebdcc6f983075d7a10f5232c3faea2d1377d2fbf43fef6e2d9265c8d9d815edb162b56f5f5f77f8a398c8a118dbb6d0d9b1d40f89b860b7baf367201987714a48bca43b01ffe00ddd7604f8e22f23", 0xbe, 0x22, 0x0, 0x3, r8}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0xc, r3, &(0x7f0000000740)="ce681ee9ea868e7b71abebf3aeebcd9e6cd6ce9a4c3e9d7b2ff97a942a4c0ddb1a5a44918b745d76d941ef3aa4a82f097386b96df2c5d48e19c8d13abe6cf1597963754946bec23433d4767e30541b0ac41040c63e186f9c329cc43936d4621843aa79ea6b31262262dbcef7b3ae9165b0eac5d80b672550c4ce180e0be2e320f78e6379ee745792f2cc77dbb8ea4d5159b325130882af", 0x97, 0x7fffffff}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xd, 0xa, r4, &(0x7f0000000840)="95021416be6ec0133c2b33290d84fec92c", 0x11, 0x9, 0x0, 0x1}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, r9, &(0x7f0000000900)="273c5ab83448235dcaa8b00854581a7705bb9d90ee9414f30cebaf7043712547e89dfab5b4338ffa067591a031b21b4a7a8291c5010f30d32f4eb209855673df03c3e30548369cbb057bdbc6cf9c85bb86ab0ee7c25d5a2ff2f5117c7c35947cd70a66110a8f16e31acafabfd9608dc020e52574d6b8b1ef0b1ce1f417262378b6fcfc1c2bf385da3ff7e5f831bbc01fc8173dd5d251eb1eacffe85133a034970792", 0xa2, 0x7, 0x0, 0x0, r10}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000a40)="dc0b29639ca5535d45a31e13a9abe1f3d324d22b61cd", 0x16, 0x400, 0x0, 0x2}]) poll(&(0x7f00000000c0)=[{r0, 0x40}, {r1, 0x4000}, {r2, 0x4000}, {r3, 0x40c}, {r5, 0x100}, {r6, 0x860e}], 0x6, 0x8) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r11, 0x4008ae9c, &(0x7f0000000000)={0x1f, 0x5, 0x6}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 1.785912518s ago: executing program 4 (id=428): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c011}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1.777378818s ago: executing program 2 (id=429): r0 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000740)=ANY=[@ANYBLOB="06e77fb94b5612010000000000106b1d01014000010203010902840003010000000904000000010100000a2401000000020102072405ff0000000c24020106020604800e05090904010000010200000904010c01010200000905010908000000000725010000000009040200000102000009040200652b06da0b2402016f0201018b7e8e072401000000000905820910000000000725"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0xfffffffffffffee1, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x41a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x6, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x121f2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x4000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000740)=ANY=[@ANYBLOB="06e77fb94b5612010000000000106b1d01014000010203010902840003010000000904000000010100000a2401000000020102072405ff0000000c24020106020604800e05090904010000010200000904010c01010200000905010908000000000725010000000009040200000102000009040200652b06da0b2402016f0201018b7e8e072401000000000905820910000000000725"], 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0xfffffffffffffee1, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x41a}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, 0x0, 0x0, 0x0}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x6, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x121f2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x4000000) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 1.619849888s ago: executing program 4 (id=430): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0xe0, &(0x7f0000000180)=""/224) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000340)={0x40, 0x15, 0x3, "153c14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @broadcast}, 0xffffffff, 0x0, 0x1}}, 0x2e) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r1, &(0x7f0000000140)="240000001e00fffffff881ff00081d000000000000000800090a00cf9aa5fba4dafbd70d", 0x24) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008040) sendfile(r3, r2, &(0x7f0000000040)=0x6, 0x0) 1.61191311s ago: executing program 3 (id=431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x6}) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200003, 0x0) 1.489545662s ago: executing program 3 (id=432): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xcf, 0x66}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8014}, 0x4040080) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) 1.375130094s ago: executing program 3 (id=433): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040016", 0x33}], 0x1}, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e61006000700263a2a0914000600626f6e643000000000000000000000000c0003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4000010) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) (async, rerun: 32) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x8, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (rerun: 32) 1.339945053s ago: executing program 3 (id=434): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) r3 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000180)={0x40, 0x12, 0x4, "00010000"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000001680)={0x34, &(0x7f0000001440)={0x40, 0x14, 0xcf, "aeca9ea2b8239daf42bfc4be00f8758970aeec0ba31e2c77d89e07dc9941ed0c02cd7719aee4872583661deb63e6952fedc31f036c40d2d1f0a9fa95ed9cd1e4c0d513142e2f48ab52dc8ffc3a4689e565e38e2d51b6db791ac33751346d557745d8ef1dce6986d1027f256614d60720f7630d2be393b3ecaa97b13129ba3f07909becfb3d7a45e0f9cdba8fffd3d8bf9de7b9fcca2c4c02a3336948ea55a53cfeb204a51bc3b59f1162a78c6b6df49331e2efa48616907130f203abb013ef2078e5536dc466633c63ae62bd0aa19c"}, 0x0, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x81}, 0x0, 0x0, &(0x7f0000001640)={0xc0, 0xa2, 0x2f, "875ffa59c727aed8a42efe589e92cca507e982bb49fcf873f25f37abbac2f64b2cf235e22918bacb5a04cc605664fa"}}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x140, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e1d79796940afc449fcf9328eb187011e701aae6d95a7795"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fb3843ff48a329a22599e71b76de8cddf75097856198643e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "26ed59201f63fde6ffffffffffffff0300"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0xffffffffffffff4b, 0xe7, "317d88623eac958c45c8cc1afa1ed079889329ff6c21c27d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x0, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "5417cc3503af3885d9c69580b4c4eba4792beb198ac99dce"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "20c9d2dc953af8fb74e310ae5537e64f1de5f074f11da8be"}], @NL80211_ATTR_IFTYPE={0xfffffd9a, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2562bd68037effd2272411fb818c1c496d99ad7209186e44"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f1d673b88ba982682208ef4deeee5f8c6baf7ee1b4110e00"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "71f3fd28b698eddec30f2493cea5415b33d439d61de9f46d"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 761.634319ms ago: executing program 3 (id=435): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x143201, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 668.112755ms ago: executing program 3 (id=436): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r0, &(0x7f0000000180)=@nfc_llcp, &(0x7f0000000240)=0x80) close_range(r0, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x0, 0x29) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') pwrite64(r1, &(0x7f0000000080)="f47ba4a9efac0ded879736d785d7d75aa2a079ba8f5cacb6553a213594b998864b31ac75c9489a7226f9dd34c1f70eeffdd4d6b18656540a7e1891e6effa3c9d6658c66aa57463dae334ae07fa2b2f717b36625ee40e1ff337b3c2a10fb87431cd34d817e9de555875f5b7b8e936f6a732a645f2823433af78da5ab75ac55fe66be00985b026a3de7b873c823e60336946fc93627a76cfcbdbfa7dcee6ffbd2b65a624a0972e8012a6890a8ca55552a5e33f23a8ff56b6f57d0e5ea83c2daecc832e", 0xc2, 0x81) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf25010000062f00010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc910}, 0x20020000) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010102cffc8610c95f628fca0f010203010902120101080900ca09040007008f9a4607a760d514f4bb86f61cf5469808a68c3ab0c4112e5216bfcb4674adf3de0aa7538d16332251e31fcde61150e54804000000a4bc7befd191197277a2567093eff9eda6049b97ccb92fdf9865dc7fd16d91873c8e"], &(0x7f00000056c0)={0x0, 0x0, 0x0, 0x0}) 642.461651ms ago: executing program 1 (id=437): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r0, 0x6b36a000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x6377, 0x12000) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x40000000, 0xfffb, 0x3}) 596.830074ms ago: executing program 1 (id=438): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x8, 0x201, 0x1, {0x4, @sdr={0x80001f01, 0xd8}}, 0x101}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r2 = dup(r1) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/17, 0x0, 0x1800, 0x6, 0x2}, 0x20) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) fcntl$getown(r1, 0x9) 247.824785ms ago: executing program 1 (id=439): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x8000000, 0x0, 0xff, 0x8}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) pselect6(0x40, &(0x7f00000001c0)={0x5, 0xfffffffffffffff9, 0x1, 0x4, 0x8, 0x0, 0x9, 0x2}, &(0x7f0000000200)={0xbe, 0x2, 0x5, 0x5, 0xc20, 0x8, 0x8000, 0x8}, &(0x7f0000000240)={0x36f060b0, 0x4, 0x7a, 0x10000, 0xd, 0x5a, 0x2, 0x5}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x71e]}, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000480)=""/222, &(0x7f0000000380)=0xde) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 227.159581ms ago: executing program 1 (id=440): r0 = inotify_init() (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0xde187bfeedb11a59, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x400c814) r3 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close_range(r4, 0xffffffffffffffff, 0x0) (async) r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r6, &(0x7f00000003c0)=ANY=[], 0x69) (async) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000007c0)) (async) close(r6) readv(r6, &(0x7f0000000700)=[{}, {&(0x7f0000000040)=""/79, 0x4f}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f00000004c0)=""/95, 0x5f}, {&(0x7f0000000540)=""/151, 0x97}, {&(0x7f0000000600)=""/71, 0x47}, {&(0x7f0000000680)=""/120, 0x78}], 0x9) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@md5={0x1, "35451e2698285ab81180d6978f5aa447"}, 0x11, 0x1) 123.444447ms ago: executing program 1 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4001) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) 0s ago: executing program 1 (id=442): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000140)={{r0}, "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"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) kernel console output (not intermixed with test programs): cc 0x0c03 length: 249 > 1 [ 108.352882][ T5871] usb 3-1: USB disconnect, device number 23 [ 108.363004][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.364716][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 108.373244][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.378027][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 108.386888][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.390996][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 108.408965][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.597676][ T6480] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.607892][ T6480] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.740903][ T61] bridge_slave_1: left allmulticast mode [ 108.747064][ T61] bridge_slave_1: left promiscuous mode [ 108.754687][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.769522][ T61] bridge_slave_0: left allmulticast mode [ 108.777329][ T61] bridge_slave_0: left promiscuous mode [ 108.783521][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.105257][ T6492] loop4: detected capacity change from 0 to 1 [ 109.186375][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.222201][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.239321][ T61] bond0 (unregistering): Released all slaves [ 109.315738][ T6484] chnl_net:caif_netlink_parms(): no params data found [ 109.380103][ T61] tipc: Left network mode [ 109.442639][ T5825] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 109.473507][ T5825] usb 4-1: USB disconnect, device number 17 [ 109.672438][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.679971][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.697221][ T6484] bridge_slave_0: entered allmulticast mode [ 109.706119][ T6484] bridge_slave_0: entered promiscuous mode [ 109.725780][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.740681][ T851] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 109.745726][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.757513][ T6484] bridge_slave_1: entered allmulticast mode [ 109.767076][ T6484] bridge_slave_1: entered promiscuous mode [ 109.800724][ T5825] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 109.883216][ T6484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.897663][ T6484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.919354][ T851] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 109.927711][ T851] usb 2-1: config 0 has no interface number 0 [ 109.935235][ T61] hsr_slave_0: left promiscuous mode [ 109.941797][ T851] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 109.951186][ T851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.953817][ T61] hsr_slave_1: left promiscuous mode [ 109.959182][ T851] usb 2-1: Product: syz [ 109.959199][ T851] usb 2-1: Manufacturer: syz [ 109.959213][ T851] usb 2-1: SerialNumber: syz [ 109.970832][ T851] usb 2-1: config 0 descriptor?? [ 109.981679][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.983478][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 109.991833][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.014994][ T5825] usb 3-1: config 251 has an invalid interface number: 48 but max is 0 [ 110.022545][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.029106][ T5825] usb 3-1: config 251 has no interface number 0 [ 110.037561][ T5825] usb 3-1: config 251 interface 48 has no altsetting 0 [ 110.044632][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.076808][ T5825] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f6.07 [ 110.087071][ T61] veth1_macvtap: left promiscuous mode [ 110.096148][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.101455][ T61] veth0_macvtap: left promiscuous mode [ 110.110442][ T61] veth1_vlan: left promiscuous mode [ 110.114520][ T5825] usb 3-1: Product: syz [ 110.116493][ T61] veth0_vlan: left promiscuous mode [ 110.123299][ T5825] usb 3-1: Manufacturer: syz [ 110.132475][ T5825] usb 3-1: SerialNumber: syz [ 110.492811][ T5834] Bluetooth: hci0: command tx timeout [ 110.553983][ T981] usb 3-1: USB disconnect, device number 24 [ 110.574545][ T851] usb 2-1: Firmware version (0.0) predates our first public release. [ 110.594289][ T851] usb 2-1: Please update to version 0.2 or newer [ 110.719711][ T61] team0 (unregistering): Port device team_slave_1 removed [ 110.758866][ T61] team0 (unregistering): Port device team_slave_0 removed [ 111.137684][ T6537] syzkaller1: entered promiscuous mode [ 111.144189][ T6537] syzkaller1: entered allmulticast mode [ 111.178616][ T6544] loop5: detected capacity change from 0 to 7 [ 111.207434][ T5838] Dev loop5: unable to read RDB block 7 [ 111.214723][ T5838] loop5: unable to read partition table [ 111.224465][ T5838] loop5: partition table beyond EOD, truncated [ 111.255563][ T6545] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.262656][ T6544] Dev loop5: unable to read RDB block 7 [ 111.268254][ T6544] loop5: unable to read partition table [ 111.277124][ T6544] loop5: partition table beyond EOD, truncated [ 111.283956][ T6544] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 111.285157][ T6484] team0: Port device team_slave_0 added [ 111.311898][ T6545] netlink: 40 bytes leftover after parsing attributes in process `syz.2.158'. [ 111.322208][ T6484] team0: Port device team_slave_1 added [ 111.439133][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.446608][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.472990][ T6484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.508972][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.541072][ T851] usb 2-1: USB disconnect, device number 19 [ 111.564752][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.595770][ T6484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.618109][ T6555] Bluetooth: MGMT ver 1.23 [ 111.633487][ T6555] program syz.2.160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.652217][ T6553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.160'. [ 111.654750][ T6557] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 111.706780][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: syz.3.161 Not tainted syzkaller #0 PREEMPT(full) [ 111.706805][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.706823][ T6557] Call Trace: [ 111.706834][ T6557] [ 111.706842][ T6557] dump_stack_lvl+0x189/0x250 [ 111.706873][ T6557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.706896][ T6557] ? __pfx__printk+0x10/0x10 [ 111.706922][ T6557] ? kernfs_path_from_node+0x250/0x290 [ 111.706948][ T6557] ? kernfs_path_from_node+0x2f/0x290 [ 111.706977][ T6557] sysfs_create_dir_ns+0x259/0x280 [ 111.707006][ T6557] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 111.707034][ T6557] ? do_raw_spin_unlock+0x122/0x240 [ 111.707063][ T6557] kobject_add_internal+0x59f/0xb70 [ 111.707093][ T6557] kobject_add+0x155/0x220 [ 111.707117][ T6557] ? __pfx_kobject_add+0x10/0x10 [ 111.707136][ T6557] ? do_raw_spin_unlock+0x122/0x240 [ 111.707164][ T6557] ? get_device_parent+0x366/0x3a0 [ 111.707193][ T6557] device_add+0x408/0xb80 [ 111.707222][ T6557] tty_register_device_attr+0x3fe/0x8f0 [ 111.707247][ T6557] ? __pfx_tty_register_device_attr+0x10/0x10 [ 111.707274][ T6557] ? tty_port_init+0x136/0x1a0 [ 111.707291][ T6557] ? gsm_dlci_alloc+0x32a/0x640 [ 111.707313][ T6557] gsm_activate_mux+0x110/0x2a0 [ 111.707337][ T6557] gsmld_ioctl+0x1261/0x18a0 [ 111.707366][ T6557] ? __pfx_gsmld_ioctl+0x10/0x10 [ 111.707395][ T6557] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 111.707424][ T6557] ? __fget_files+0x2a/0x420 [ 111.707454][ T6557] ? __pfx_gsmld_ioctl+0x10/0x10 [ 111.707469][ T6557] tty_ioctl+0x9c6/0xde0 [ 111.707505][ T6557] ? __pfx_tty_ioctl+0x10/0x10 [ 111.707531][ T6557] __se_sys_ioctl+0xfc/0x170 [ 111.707560][ T6557] do_syscall_64+0xfa/0xfa0 [ 111.707579][ T6557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.707597][ T6557] ? clear_bhb_loop+0x60/0xb0 [ 111.707619][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.707637][ T6557] RIP: 0033:0x7fa4a398f6c9 [ 111.707660][ T6557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.707674][ T6557] RSP: 002b:00007fa4a1bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.707695][ T6557] RAX: ffffffffffffffda RBX: 00007fa4a3be6090 RCX: 00007fa4a398f6c9 [ 111.707708][ T6557] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 111.707719][ T6557] RBP: 00007fa4a3a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.707730][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.707741][ T6557] R13: 00007fa4a3be6128 R14: 00007fa4a3be6090 R15: 00007ffe88e98888 [ 111.707779][ T6557] [ 111.707809][ T6557] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 111.814470][ T6562] tipc: Started in network mode [ 112.021132][ T6562] tipc: Node identity , cluster identity 4711 [ 112.039273][ T6562] tipc: Failed to obtain node identity [ 112.060346][ T6562] tipc: Enabling of bearer rejected, failed to enable media [ 112.355258][ T6484] hsr_slave_0: entered promiscuous mode [ 112.363450][ T6484] hsr_slave_1: entered promiscuous mode [ 112.395119][ T6484] debugfs: 'hsr0' already exists in 'hsr' [ 112.401265][ T6484] Cannot create hsr debugfs directory [ 112.526526][ T6581] openvswitch: netlink: Flow key attr not present in new flow. [ 112.570711][ T5834] Bluetooth: hci0: command tx timeout [ 113.063594][ T5924] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.079025][ T6484] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.121973][ T5924] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.175681][ T6484] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.221490][ T6484] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.292290][ T6484] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.767464][ T6484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.819805][ T6484] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.863687][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.870935][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.905000][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.912236][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.971528][ T5924] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 114.125571][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.162694][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.177370][ T5924] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 114.187158][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.216636][ T5924] usb 2-1: config 0 descriptor?? [ 114.232082][ T5871] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 114.300821][ T6484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.435695][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 114.439990][ T5924] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 114.471119][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 17, changing to 7 [ 114.474079][ T5924] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 114.520785][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1382, setting to 1024 [ 114.553214][ T5871] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.584989][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.604435][ T5871] usb 4-1: Product: syz [ 114.608637][ T5871] usb 4-1: Manufacturer: syz [ 114.638122][ T5924] cp2112 0003:10C4:EA90.0008: Part Number: 0x1A Device Version: 0xC4 [ 114.640630][ T5871] usb 4-1: SerialNumber: syz [ 114.653521][ T5834] Bluetooth: hci0: command tx timeout [ 114.674260][ T5871] usb 4-1: config 0 descriptor?? [ 114.697428][ T5871] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 15, bLength 9, bSynchAddress 94 [ 114.722320][ T5924] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 114.783023][ T5924] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -71 [ 114.822078][ T5924] usb 2-1: USB disconnect, device number 20 [ 115.189749][ T6484] veth0_vlan: entered promiscuous mode [ 115.248477][ T6484] veth1_vlan: entered promiscuous mode [ 115.281512][ T5924] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 115.307550][ T5871] usb 4-1: USB disconnect, device number 18 [ 115.438418][ T6658] syzkaller1: entered promiscuous mode [ 115.445294][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 115.467629][ T5924] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 115.493544][ T6658] syzkaller1: entered allmulticast mode [ 115.499202][ T5924] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 115.526796][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.556772][ T5924] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.591050][ T6484] veth0_macvtap: entered promiscuous mode [ 115.617825][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.644808][ T6484] veth1_macvtap: entered promiscuous mode [ 115.651525][ T5924] usb 2-1: Product: syz [ 115.655708][ T5924] usb 2-1: Manufacturer: syz [ 115.660316][ T5924] usb 2-1: SerialNumber: syz [ 115.706764][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.735094][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.786712][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.813805][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.863978][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.888924][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.056431][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.085975][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.185026][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.213534][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.290713][ T981] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 116.447065][ T981] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.459692][ T981] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 116.469021][ T981] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.485711][ T981] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.495633][ T981] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 116.498733][ T5871] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 116.504254][ T981] usb 4-1: Product: syz [ 116.504275][ T981] usb 4-1: Manufacturer: syz [ 116.504312][ T981] usb 4-1: SerialNumber: syz [ 116.512666][ T981] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 116.512711][ T981] cdc_mbim 4-1:1.0: bind() failure [ 116.704204][ T5825] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.738203][ T5834] Bluetooth: hci0: command tx timeout [ 116.771712][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 116.779957][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.799145][ T5871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.823162][ T5871] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 116.841186][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.849234][ T5871] usb 3-1: Product: syz [ 116.871555][ T5871] usb 3-1: Manufacturer: syz [ 116.876239][ T5871] usb 3-1: SerialNumber: syz [ 116.880966][ T5825] usb 5-1: Using ep0 maxpacket: 32 [ 116.897271][ T5825] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 116.912493][ T5871] usb 3-1: config 0 descriptor?? [ 116.931151][ T5825] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 116.940276][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.961392][ T794] usb 4-1: USB disconnect, device number 19 [ 117.002326][ T5825] usb 5-1: config 0 descriptor?? [ 117.417637][ T6681] vxcan1 speed is unknown, defaulting to 1000 [ 117.438378][ T6681] vxcan1 speed is unknown, defaulting to 1000 [ 117.465677][ T6681] vxcan1 speed is unknown, defaulting to 1000 [ 117.612222][ T6711] netlink: 'syz.3.178': attribute type 2 has an invalid length. [ 117.628440][ T6711] netlink: 'syz.3.178': attribute type 4 has an invalid length. [ 117.816748][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 117.824288][ T6681] infiniband syz2: set active [ 117.844424][ T6681] infiniband syz2: added vxcan1 [ 117.849905][ T5924] usb 2-1: 0:2 : does not exist [ 117.919380][ T5924] usb 2-1: USB disconnect, device number 21 [ 118.066617][ T6681] RDS/IB: syz2: added [ 118.071526][ T6681] smc: adding ib device syz2 with port count 1 [ 118.081310][ T6681] smc: ib device syz2 port 1 has no pnetid [ 118.095861][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 118.147918][ T6681] vxcan1 speed is unknown, defaulting to 1000 [ 118.439851][ T6681] vxcan1 speed is unknown, defaulting to 1000 [ 118.583053][ T6681] vxcan1 speed is unknown, defaulting to 1000 [ 118.640665][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 118.772266][ T6681] vxcan1 speed is unknown, defaulting to 1000 [ 118.801908][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 118.816692][ T10] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 118.835824][ T10] usb 2-1: config 1 has no interface number 0 [ 118.842706][ T10] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 118.855796][ T10] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 118.866671][ T10] usb 2-1: config 1 interface 105 has no altsetting 0 [ 118.876840][ T10] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 118.886475][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.900404][ T10] usb 2-1: Product: syz [ 118.905041][ T10] usb 2-1: Manufacturer: syz [ 118.909967][ T10] usb 2-1: SerialNumber: syz [ 118.936953][ T6727] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.945246][ T6727] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.112148][ T5825] usb 3-1: USB disconnect, device number 25 [ 119.359945][ T6727] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.367400][ T6727] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.392575][ T981] usb 5-1: USB disconnect, device number 2 [ 119.575967][ T6747] syzkaller1: entered promiscuous mode [ 119.581949][ T6747] syzkaller1: entered allmulticast mode [ 119.596158][ T6727] loop3: detected capacity change from 0 to 7 [ 119.614850][ T5838] Dev loop3: unable to read RDB block 7 [ 119.621799][ T5838] loop3: unable to read partition table [ 119.627684][ T5838] loop3: partition table beyond EOD, truncated [ 119.637382][ T6727] Dev loop3: unable to read RDB block 7 [ 119.643122][ T6727] loop3: unable to read partition table [ 119.649071][ T6727] loop3: partition table beyond EOD, truncated [ 119.655575][ T6727] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 119.850159][ T10] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 119.863576][ T10] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 119.883247][ T10] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8a:93:cf:7e:ac:5f [ 119.950170][ T5196] Dev loop3: unable to read RDB block 7 [ 119.956670][ T5196] loop3: unable to read partition table [ 119.963140][ T5196] loop3: partition table beyond EOD, truncated [ 120.032670][ T5196] Dev loop3: unable to read RDB block 7 [ 120.038389][ T5196] loop3: unable to read partition table [ 120.048034][ T5196] loop3: partition table beyond EOD, truncated [ 120.050992][ T981] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.079160][ T5924] usb 2-1: USB disconnect, device number 22 [ 120.099066][ T5924] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 120.167479][ T6764] syzkaller1: entered promiscuous mode [ 120.173491][ T6764] syzkaller1: entered allmulticast mode [ 120.206165][ T5924] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 120.216261][ T5924] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 120.228864][ T5924] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 120.242953][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.272896][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.296482][ T981] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 120.310658][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.331482][ T981] usb 5-1: config 0 descriptor?? [ 120.547997][ T6756] 9p: Bad value for 'rfdno' [ 120.765516][ T981] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x2 [ 120.775789][ T981] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 120.930835][ T5924] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 120.940878][ T794] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 120.949054][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 120.965800][ T981] cp2112 0003:10C4:EA90.0009: Part Number: 0x1A Device Version: 0xC4 [ 121.061093][ T5924] usb 3-1: device descriptor read/64, error -71 [ 121.100955][ T794] usb 4-1: Using ep0 maxpacket: 32 [ 121.108862][ T794] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.123447][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 121.132103][ T794] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.143486][ T794] usb 4-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.157803][ T24] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 121.169058][ T24] usb 2-1: config 0 has no interface number 0 [ 121.175594][ T794] usb 4-1: config 1 interface 0 has no altsetting 0 [ 121.182776][ T24] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.197464][ T24] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 121.206881][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.216147][ T24] usb 2-1: Product: syz [ 121.220471][ T24] usb 2-1: Manufacturer: syz [ 121.225417][ T794] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.234657][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.242975][ T24] usb 2-1: SerialNumber: syz [ 121.248631][ T794] usb 4-1: Product: syz [ 121.254854][ T24] usb 2-1: config 0 descriptor?? [ 121.260092][ T794] usb 4-1: Manufacturer: syz [ 121.268101][ T24] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 121.278046][ T794] usb 4-1: SerialNumber: syz [ 121.284971][ T24] em28xx 2-1:0.132: Video interface 132 found: [ 121.320784][ T5924] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 121.451256][ T5924] usb 3-1: device descriptor read/64, error -71 [ 121.495460][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.505421][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.532714][ T794] usb 4-1: bad CDC descriptors [ 121.543424][ T794] usb 4-1: USB disconnect, device number 20 [ 121.562012][ T5924] usb usb3-port1: attempt power cycle [ 121.577667][ T6756] cp2112 0003:10C4:EA90.0009: Error starting transaction: -38 [ 121.588114][ T981] cp2112 0003:10C4:EA90.0009: error reading lock byte: -71 [ 121.604169][ T981] usb 5-1: USB disconnect, device number 3 [ 121.667103][ T24] em28xx 2-1:0.132: chip ID is em2884 [ 121.900739][ T5924] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 121.921466][ T5924] usb 3-1: device descriptor read/8, error -71 [ 122.129114][ T6809] tipc: Started in network mode [ 122.135077][ T6809] tipc: Node identity d27affc0c31d, cluster identity 4711 [ 122.143453][ T6809] tipc: Enabled bearer , priority 0 [ 122.175794][ T5924] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 122.222128][ T5924] usb 3-1: device descriptor read/8, error -71 [ 122.233753][ T6809] syzkaller0: entered promiscuous mode [ 122.239533][ T6809] syzkaller0: entered allmulticast mode [ 122.247547][ T6809] tipc: Resetting bearer [ 122.258704][ T6808] tipc: Resetting bearer [ 122.344956][ T5924] usb usb3-port1: unable to enumerate USB device [ 122.811582][ T24] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 122.828915][ T24] em28xx 2-1:0.132: board has no eeprom [ 122.897809][ T24] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 122.906944][ T24] em28xx 2-1:0.132: analog set to bulk mode. [ 122.913112][ T794] em28xx 2-1:0.132: Registering V4L2 extension [ 122.979023][ T794] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 123.003744][ T794] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 123.022376][ T794] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 123.037594][ T794] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 123.186105][ T794] em28xx 2-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 123.198349][ T794] em28xx 2-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 123.217125][ T794] em28xx 2-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 123.234171][ T794] em28xx 2-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 123.244692][ T24] tipc: Node number set to 292028352 [ 123.312587][ T794] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 123.330086][ T794] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 123.352053][ T794] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 123.374168][ T794] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 123.395599][ T794] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 123.419177][ T794] em28xx 2-1:0.132: Config register raw data: 0xfffffffb [ 123.433082][ T794] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 123.440333][ T794] em28xx 2-1:0.132: No AC97 audio processor [ 123.476827][ T794] usb 2-1: Decoder not found [ 123.488711][ T794] em28xx 2-1:0.132: failed to create media graph [ 123.501247][ T794] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 123.521363][ T5871] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.528839][ T794] em28xx 2-1:0.132: Remote control support is not available for this card. [ 123.701476][ T5871] usb 5-1: no configurations [ 123.715055][ T5871] usb 5-1: can't read configurations, error -22 [ 123.745304][ T794] usb 2-1: USB disconnect, device number 23 [ 123.757978][ T794] em28xx 2-1:0.132: Disconnecting em28xx [ 123.776670][ T6826] netlink: 172 bytes leftover after parsing attributes in process `syz.2.205'. [ 123.781710][ T794] em28xx 2-1:0.132: Closing input extension [ 123.828552][ T794] em28xx 2-1:0.132: Freeing device [ 123.880828][ T5871] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 124.044317][ T5871] usb 5-1: no configurations [ 124.049197][ T5871] usb 5-1: can't read configurations, error -22 [ 124.062679][ T5871] usb usb5-port1: attempt power cycle [ 124.394235][ T6808] tipc: Disabling bearer [ 124.420842][ T5871] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.471658][ T5871] usb 5-1: no configurations [ 124.476314][ T5871] usb 5-1: can't read configurations, error -22 [ 124.590928][ T6843] fuse: Bad value for 'group_id' [ 124.595921][ T6843] fuse: Bad value for 'group_id' [ 124.631408][ T5871] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 124.662880][ T5871] usb 5-1: no configurations [ 124.667530][ T5871] usb 5-1: can't read configurations, error -22 [ 124.675893][ T5871] usb usb5-port1: unable to enumerate USB device [ 124.691536][ T6850] netlink: 48 bytes leftover after parsing attributes in process `syz.3.210'. [ 124.810884][ T5871] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.850733][ T5924] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 124.942303][ T794] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 124.961629][ T5871] usb 5-1: no configurations [ 124.966261][ T5871] usb 5-1: can't read configurations, error -22 [ 125.000734][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 125.007252][ T5924] usb 2-1: config 150 has an invalid interface number: 59 but max is 0 [ 125.015662][ T5924] usb 2-1: config 150 has no interface number 0 [ 125.022450][ T5924] usb 2-1: config 150 interface 59 has no altsetting 0 [ 125.031426][ T5924] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=36.86 [ 125.040482][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.049315][ T5924] usb 2-1: Product: syz [ 125.054007][ T5924] usb 2-1: Manufacturer: syz [ 125.058614][ T5924] usb 2-1: SerialNumber: syz [ 125.100849][ T5871] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 125.113159][ T794] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 125.131669][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.139819][ T794] usb 4-1: Product: syz [ 125.144453][ T794] usb 4-1: Manufacturer: syz [ 125.150210][ T794] usb 4-1: SerialNumber: syz [ 125.164150][ T794] usb 4-1: config 0 descriptor?? [ 125.174530][ T794] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 125.186566][ T794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.196928][ T794] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 125.206508][ T794] usb 4-1: media controller created [ 125.221394][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.270252][ T6843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.277975][ T794] DVB: Unable to find symbol mt352_attach() [ 125.280805][ T5871] usb 5-1: no configurations [ 125.287427][ T6843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.312455][ T5871] usb 5-1: can't read configurations, error -22 [ 125.329983][ T6843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.341365][ T5871] usb usb5-port1: attempt power cycle [ 125.350138][ T6843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.357986][ T794] DVB: Unable to find symbol nxt6000_attach() [ 125.364499][ T794] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 125.384648][ T794] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 125.404718][ T5924] mvusb_mdio 2-1:150.59: probe with driver mvusb_mdio failed with error -5 [ 125.416558][ T794] dvb-usb: schedule remote query interval to 1000 msecs. [ 125.425602][ T5924] usb 2-1: USB disconnect, device number 24 [ 125.433198][ T794] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 125.443926][ T794] dvb-usb: bulk message failed: -22 (7/0) [ 125.449843][ T794] dvb-usb: bulk message failed: -22 (7/0) [ 125.690853][ T5871] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 125.711898][ T5871] usb 5-1: no configurations [ 125.716707][ T5871] usb 5-1: can't read configurations, error -22 [ 125.851135][ T5871] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.882319][ T5871] usb 5-1: no configurations [ 125.886969][ T5871] usb 5-1: can't read configurations, error -22 [ 125.894236][ T5871] usb usb5-port1: unable to enumerate USB device [ 125.902745][ T6850] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 125.917528][ T5924] usb 4-1: USB disconnect, device number 21 [ 125.996486][ T5924] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 126.359589][ T6876] netlink: 'syz.4.218': attribute type 27 has an invalid length. [ 126.377007][ T6877] vivid-004: ================= START STATUS ================= [ 126.378197][ T5871] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 126.386004][ T6877] vivid-004: Radio HW Seek Mode: Bounded [ 126.402332][ T6877] vivid-004: Radio Programmable HW Seek: false [ 126.408610][ T6877] vivid-004: RDS Rx I/O Mode: Block I/O [ 126.415268][ T6877] vivid-004: Generate RBDS Instead of RDS: false [ 126.421761][ T6877] vivid-004: RDS Reception: true [ 126.425406][ T6880] ntfs3(loop1): try to read out of volume at offset 0x0 [ 126.446231][ T6877] vivid-004: RDS Program Type: 0 inactive [ 126.456344][ T6877] vivid-004: RDS PS Name: inactive [ 126.466590][ T6877] vivid-004: RDS Radio Text: inactive [ 126.473294][ T6877] vivid-004: RDS Traffic Announcement: false inactive [ 126.485531][ T6877] vivid-004: RDS Traffic Program: false inactive [ 126.493799][ T6877] vivid-004: RDS Music: false inactive [ 126.499474][ T6877] vivid-004: ================== END STATUS ================== [ 126.572851][ T5871] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 126.590368][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.604303][ T5871] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 126.613730][ T5871] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 126.621837][ T5871] usb 3-1: Manufacturer: syz [ 126.629122][ T5871] usb 3-1: config 0 descriptor?? [ 126.681125][ T5871] rc_core: IR keymap rc-hauppauge not found [ 126.687065][ T5871] Registered IR keymap rc-empty [ 126.696764][ T5871] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 126.708730][ T5871] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 126.750730][ T5924] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 126.770690][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 126.880734][ T5924] usb 2-1: device descriptor read/64, error -71 [ 126.920716][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 126.928396][ T24] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 126.936822][ T24] usb 4-1: config 0 has no interface number 0 [ 126.943094][ T24] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 126.955354][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 126.964590][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.972855][ T24] usb 4-1: Product: syz [ 126.977035][ T24] usb 4-1: Manufacturer: syz [ 126.981732][ T24] usb 4-1: SerialNumber: syz [ 126.989714][ T24] usb 4-1: config 0 descriptor?? [ 126.995863][ T6883] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 127.044242][ C0] igorplugusb 3-1:0.0: receive overflow invalid: 44 [ 127.120722][ T5924] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 127.217618][ T6883] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 127.250892][ T5924] usb 2-1: device descriptor read/64, error -71 [ 127.268554][ T794] usb 3-1: USB disconnect, device number 30 [ 127.384025][ T5924] usb usb2-port1: attempt power cycle [ 127.747931][ T5924] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 127.783021][ T5924] usb 2-1: device descriptor read/8, error -71 [ 128.040762][ T5924] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 128.061911][ T5924] usb 2-1: device descriptor read/8, error -71 [ 128.101797][ T794] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 128.174278][ T5924] usb usb2-port1: unable to enumerate USB device [ 128.260785][ T794] usb 3-1: Using ep0 maxpacket: 32 [ 128.267497][ T794] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 128.275751][ T794] usb 3-1: config 0 has no interface number 0 [ 128.281963][ T794] usb 3-1: config 0 interface 184 has no altsetting 0 [ 128.291775][ T794] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 128.300925][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.308917][ T794] usb 3-1: Product: syz [ 128.313247][ T794] usb 3-1: Manufacturer: syz [ 128.317871][ T794] usb 3-1: SerialNumber: syz [ 128.325683][ T794] usb 3-1: config 0 descriptor?? [ 128.334341][ T794] smsc75xx v1.0.0 [ 128.536150][ T794] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 128.547159][ T794] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 128.556866][ T794] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 128.567457][ T794] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 129.252447][ T24] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 129.280521][ T24] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 129.314789][ T794] usb 3-1: USB disconnect, device number 31 [ 129.335349][ T24] asix 4-1:0.188: probe with driver asix failed with error -71 [ 129.375258][ T24] usb 4-1: USB disconnect, device number 22 [ 129.920760][ T5825] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 130.005813][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 130.081078][ T794] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 130.091024][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 130.104644][ T5825] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.113692][ T5825] usb 2-1: config 0 has no interface number 0 [ 130.119896][ T5825] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.131428][ T5825] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.142010][ T5825] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 130.151958][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.164620][ T5825] usb 2-1: config 0 descriptor?? [ 130.170901][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 130.178542][ T24] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 130.192215][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.209635][ T24] usb 3-1: config 0 descriptor?? [ 130.217576][ T24] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 130.255309][ T794] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.280672][ T794] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 130.300681][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.335547][ T794] usb 4-1: config 0 descriptor?? [ 130.356094][ T794] pegasus_notetaker 4-1:0.0: Invalid number of endpoints [ 130.369125][ T794] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 130.423381][ T24] usb 3-1: Detected FT232B [ 130.567433][ T10] usb 4-1: USB disconnect, device number 23 [ 130.625267][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 130.641142][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 130.663430][ T24] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 130.692756][ T24] usb 3-1: USB disconnect, device number 32 [ 130.699698][ T6975] can0: slcan on ttyprintk. [ 130.708903][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 130.721126][ T6975] bridge0: port 3(batadv0) entered blocking state [ 130.727808][ T6975] bridge0: port 3(batadv0) entered disabled state [ 130.737535][ T24] ftdi_sio 3-1:0.0: device disconnected [ 130.743390][ T6975] batadv0: entered allmulticast mode [ 130.748275][ T6975] batadv0: entered promiscuous mode [ 130.755388][ T6975] bridge0: port 3(batadv0) entered blocking state [ 130.762291][ T6975] bridge0: port 3(batadv0) entered forwarding state [ 130.786085][ T5825] uclogic 0003:28BD:0094.000A: failed retrieving string descriptor #100: -71 [ 130.803806][ T5825] uclogic 0003:28BD:0094.000A: failed retrieving pen parameters: -71 [ 130.829646][ T5825] uclogic 0003:28BD:0094.000A: pen probing failed: -71 [ 130.841985][ T5825] uclogic 0003:28BD:0094.000A: failed probing parameters: -71 [ 130.849595][ T5825] uclogic 0003:28BD:0094.000A: probe with driver uclogic failed with error -71 [ 130.881385][ T775] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 130.888979][ T5825] usb 2-1: USB disconnect, device number 29 [ 130.891013][ T775] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 131.071140][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 131.252965][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 131.270542][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 63978, setting to 1024 [ 131.302500][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 131.344768][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 131.378554][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.405701][ T24] usb 5-1: Product: syz [ 131.414453][ T24] usb 5-1: Manufacturer: syz [ 131.425731][ T24] usb 5-1: SerialNumber: syz [ 131.444097][ T24] usb 5-1: config 0 descriptor?? [ 131.460443][ T6975] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 131.504587][ T24] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 9e, bLength 9, bSynchAddress 37 [ 131.666648][ T7000] ntfs3(loop2): try to read out of volume at offset 0x0 [ 131.688317][ T6975] 9pnet_fd: Insufficient options for proto=fd [ 131.807764][ T6974] can0 (unregistered): slcan off ttyprintk. [ 131.841961][ T24] usb 5-1: USB disconnect, device number 12 [ 131.990722][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 132.141075][ T10] usb 3-1: device descriptor read/64, error -71 [ 132.323847][ T5825] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 132.391815][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 132.434540][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 132.493036][ T5825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.506034][ T5825] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 132.517013][ T5825] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 132.530720][ T10] usb 3-1: device descriptor read/64, error -71 [ 132.538157][ T5825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.549414][ T5825] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 132.560424][ T5825] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 132.578084][ T5825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.588350][ T5825] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 132.599202][ T5825] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 132.600680][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 132.615346][ T5825] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.619205][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 132.627863][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 132.638671][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.657925][ T10] usb usb3-port1: attempt power cycle [ 132.665142][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.666042][ T5825] usb 2-1: SerialNumber: syz [ 132.675116][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 132.694563][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 132.703684][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.716409][ T24] usb 4-1: config 0 descriptor?? [ 132.741172][ T5871] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 132.891756][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 132.898713][ T5871] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 132.908565][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.915032][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.922459][ T7013] netlink: 14 bytes leftover after parsing attributes in process `syz.1.239'. [ 132.935511][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.946989][ T5871] usb 5-1: config 0 descriptor?? [ 132.955243][ T5871] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 133.005621][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 133.032639][ T10] usb 3-1: device descriptor read/8, error -71 [ 133.140391][ T24] redragon 0003:0C45:760B.000B: unknown main item tag 0x6 [ 133.148011][ T24] redragon 0003:0C45:760B.000B: item fetching failed at offset 7/133 [ 133.156182][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.156627][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.165467][ T24] redragon 0003:0C45:760B.000B: probe with driver redragon failed with error -22 [ 133.202703][ T5871] gspca_nw80x: reg_r err -71 [ 133.207449][ T5871] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 133.223590][ T5871] usb 5-1: USB disconnect, device number 13 [ 133.273761][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 133.301441][ T10] usb 3-1: device descriptor read/8, error -71 [ 133.349155][ T981] usb 4-1: USB disconnect, device number 24 [ 133.410916][ T10] usb usb3-port1: unable to enumerate USB device [ 133.609925][ T10] usb 2-1: USB disconnect, device number 30 [ 133.980879][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 134.070863][ T24] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 134.142931][ T10] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.152826][ T10] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 134.166194][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.173590][ T10] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 134.182730][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.193729][ T10] usb 2-1: config 0 descriptor?? [ 134.232873][ T24] usb 5-1: config 9 has an invalid interface number: 252 but max is 0 [ 134.241349][ T24] usb 5-1: config 9 has no interface number 0 [ 134.247490][ T24] usb 5-1: config 9 interface 252 has no altsetting 0 [ 134.258101][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice=dd.7c [ 134.268278][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.276413][ T24] usb 5-1: Product: syz [ 134.280651][ T24] usb 5-1: Manufacturer: syz [ 134.285252][ T24] usb 5-1: SerialNumber: syz [ 134.350700][ T5825] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 134.502656][ T24] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:9.252/input/input17 [ 134.507571][ T5825] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 134.524517][ T5181] bcm5974 5-1:9.252: could not read from device [ 134.532252][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.539279][ T24] usb 5-1: USB disconnect, device number 14 [ 134.540378][ T5825] usb 4-1: Product: syz [ 134.551528][ T5181] bcm5974 5-1:9.252: could not read from device [ 134.558230][ T5825] usb 4-1: Manufacturer: syz [ 134.563541][ T5825] usb 4-1: SerialNumber: syz [ 134.587510][ T5825] usb 4-1: config 0 descriptor?? [ 134.793388][ T7055] overlay: filesystem on ./bus is read-only [ 135.009560][ T5825] airspy 4-1:0.0: Board ID: 00 [ 135.014602][ T5825] airspy 4-1:0.0: Firmware version: [ 135.141639][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 135.142832][ T7060] netlink: 168 bytes leftover after parsing attributes in process `syz.4.251'. [ 135.290690][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 135.297917][ T24] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.311200][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.318277][ T24] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 135.327494][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.341628][ T24] usb 3-1: config 0 descriptor?? [ 135.415804][ T5825] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 135.432473][ T5825] airspy 4-1:0.0: Registered as swradio24 [ 135.439808][ T5825] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 135.452523][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 135.458575][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 135.497562][ T5825] usb 4-1: USB disconnect, device number 25 [ 135.504764][ T10] usb 2-1: USB disconnect, device number 31 [ 135.551136][ T7064] netlink: 'syz.1.253': attribute type 2 has an invalid length. [ 135.566785][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.599110][ T7064] program syz.1.253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.609245][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.661131][ T5871] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 135.825886][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.826375][ T24] elecom 0003:056E:00E6.000C: unknown main item tag 0x7 [ 135.837721][ T5871] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 135.850782][ T24] elecom 0003:056E:00E6.000C: hidraw0: USB HID v10.00 Device [HID 056e:00e6] on usb-dummy_hcd.2-1/input0 [ 135.860675][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.881167][ T5871] usb 5-1: config 0 descriptor?? [ 135.893403][ T5871] pwc: Askey VC010 type 2 USB webcam detected. [ 136.006916][ T7070] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 136.016780][ T24] IPVS: starting estimator thread 0... [ 136.023560][ T7070] program syz.3.255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.035268][ T10] usb 3-1: USB disconnect, device number 37 [ 136.110863][ T7071] IPVS: using max 30 ests per chain, 72000 per kthread [ 136.301947][ T5871] pwc: recv_control_msg error -32 req 02 val 2b00 [ 136.326022][ T5871] pwc: recv_control_msg error -32 req 02 val 2700 [ 136.336262][ T5871] pwc: recv_control_msg error -32 req 02 val 2c00 [ 136.498550][ T7092] binder: 7090:7092 ioctl c00c6211 0 returned -14 [ 136.572922][ T5871] pwc: recv_control_msg error -32 req 04 val 1300 [ 136.591155][ T5871] pwc: recv_control_msg error -32 req 04 val 1400 [ 136.599011][ T5871] pwc: recv_control_msg error -32 req 02 val 2000 [ 136.608773][ T5871] pwc: recv_control_msg error -32 req 02 val 2100 [ 136.616751][ T5871] pwc: recv_control_msg error -32 req 04 val 1500 [ 136.624031][ T5871] pwc: recv_control_msg error -32 req 02 val 2500 [ 136.634604][ T5871] pwc: recv_control_msg error -32 req 02 val 2400 [ 136.642569][ T5871] pwc: recv_control_msg error -32 req 02 val 2600 [ 136.714328][ T7097] vxcan1 speed is unknown, defaulting to 1000 [ 136.747021][ T7095] netlink: 'syz.1.263': attribute type 1 has an invalid length. [ 136.755341][ T7095] netlink: 224 bytes leftover after parsing attributes in process `syz.1.263'. [ 136.765731][ T7095] block nbd0: not configured, cannot reconfigure [ 136.850520][ T5871] pwc: recv_control_msg error -32 req 02 val 2800 [ 136.858513][ T5871] pwc: recv_control_msg error -32 req 04 val 1100 [ 136.872650][ T5871] pwc: recv_control_msg error -32 req 04 val 1200 [ 136.881134][ T5871] pwc: Registered as video103. [ 136.888354][ T5871] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 136.971720][ T981] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 137.143097][ T981] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.155784][ T981] usb 3-1: config 0 has an invalid interface number: 45 but max is 1 [ 137.167260][ T981] usb 3-1: config 0 has an invalid interface number: 41 but max is 1 [ 137.185942][ T981] usb 3-1: config 0 has an invalid interface number: 148 but max is 1 [ 137.194779][ T981] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 137.204031][ T981] usb 3-1: config 0 has no interface number 0 [ 137.210234][ T981] usb 3-1: config 0 has no interface number 1 [ 137.217369][ T981] usb 3-1: config 0 has no interface number 2 [ 137.224867][ T7103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.238799][ T981] usb 3-1: config 0 interface 41 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 137.253311][ T981] usb 3-1: too many endpoints for config 0 interface 148 altsetting 223: 183, using maximum allowed: 30 [ 137.261986][ T5871] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 137.266425][ T7103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.285859][ T981] usb 3-1: config 0 interface 148 altsetting 223 has 0 endpoint descriptors, different from the interface descriptor's value: 183 [ 137.300400][ T981] usb 3-1: config 0 interface 45 has no altsetting 0 [ 137.307414][ T981] usb 3-1: config 0 interface 41 has no altsetting 0 [ 137.314816][ T981] usb 3-1: config 0 interface 148 has no altsetting 0 [ 137.327148][ T981] usb 3-1: New USB device found, idVendor=1410, idProduct=a007, bcdDevice=e2.70 [ 137.338728][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.346938][ T981] usb 3-1: Product: syz [ 137.351856][ T981] usb 3-1: Manufacturer: syz [ 137.356489][ T981] usb 3-1: SerialNumber: syz [ 137.372431][ T981] usb 3-1: config 0 descriptor?? [ 137.440673][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 137.455347][ T5871] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 137.463768][ T5871] usb 2-1: config 0 has no interface number 0 [ 137.469934][ T5871] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 137.482161][ T5871] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 137.495527][ T5871] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 137.504874][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.513084][ T5871] usb 2-1: Product: syz [ 137.517259][ T5871] usb 2-1: Manufacturer: syz [ 137.522114][ T5871] usb 2-1: SerialNumber: syz [ 137.529108][ T5871] usb 2-1: config 0 descriptor?? [ 137.537383][ T7102] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 137.545614][ T7102] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 137.577957][ T5871] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 86:9a:59:86:e6:e6 [ 137.667488][ T981] usb 3-1: USB disconnect, device number 38 [ 138.521536][ T5871] usb 2-1: USB disconnect, device number 32 [ 138.537973][ T5871] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 138.755873][ T9] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 138.917612][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.928318][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.943160][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.952587][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.961125][ T9] usb 3-1: Product: syz [ 138.965509][ T9] usb 3-1: Manufacturer: syz [ 138.971078][ T9] usb 3-1: SerialNumber: syz [ 139.037904][ T5871] usb 5-1: USB disconnect, device number 15 [ 139.194199][ T7129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.226104][ T7129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.463058][ T9] usb 3-1: 0:2 : does not exist [ 139.525937][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 139.529034][ T7154] netlink: 'syz.4.273': attribute type 1 has an invalid length. [ 139.543020][ T7154] netlink: 224 bytes leftover after parsing attributes in process `syz.4.273'. [ 139.554135][ T7154] block nbd0: not configured, cannot reconfigure [ 139.751767][ T981] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 139.873745][ T24] usb 3-1: USB disconnect, device number 39 [ 139.923604][ T981] usb 4-1: Using ep0 maxpacket: 32 [ 139.930335][ T981] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.939434][ T981] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 139.949008][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.965519][ T981] usb 4-1: config 0 descriptor?? [ 140.030687][ T794] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 140.180189][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.181535][ T794] usb 2-1: Using ep0 maxpacket: 32 [ 140.189114][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.198716][ T794] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 140.213662][ T794] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 140.223922][ T794] usb 2-1: config 0 has no interface number 0 [ 140.231747][ T794] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 140.239985][ T794] usb 2-1: config 0 has no interface number 0 [ 140.248034][ T794] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 140.256262][ T794] usb 2-1: config 0 has no interface number 0 [ 140.263596][ T794] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 140.271697][ T794] usb 2-1: config 0 has no interface number 0 [ 140.278915][ T794] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 140.287110][ T794] usb 2-1: config 0 has no interface number 0 [ 140.294645][ T794] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 140.307194][ T794] usb 2-1: config 0 has no interface number 0 [ 140.313457][ T981] usb 4-1: string descriptor 0 read error: -71 [ 140.324714][ T981] usbhid 4-1:0.0: can't add hid device: -71 [ 140.330872][ T794] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 140.338953][ T794] usb 2-1: config 0 has no interface number 0 [ 140.345200][ T981] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 140.354328][ T794] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 140.365001][ T981] usb 4-1: USB disconnect, device number 26 [ 140.370994][ T794] usb 2-1: config 0 has no interface number 0 [ 140.394331][ T794] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 140.404356][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.414793][ T794] usb 2-1: Product: syz [ 140.420044][ T794] usb 2-1: Manufacturer: syz [ 140.425004][ T794] usb 2-1: SerialNumber: syz [ 140.436696][ T794] usb 2-1: config 0 descriptor?? [ 140.451371][ T794] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 140.757372][ T7185] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 140.764151][ T7185] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 140.771105][ T7185] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 140.777827][ T7185] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 140.785035][ T7185] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 140.791631][ T7185] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 140.863503][ T9] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 140.868505][ T794] etas_es58x 2-1:0.2: could not parse product info: '' [ 141.043351][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.054492][ T9] usb 5-1: config 0 has no interfaces? [ 141.075026][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 141.128055][ T9] usb 5-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.40 [ 141.143909][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.171405][ T9] usb 5-1: config 0 descriptor?? [ 141.350677][ T851] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 141.396232][ T794] usb 5-1: USB disconnect, device number 16 [ 141.521565][ T851] usb 3-1: Using ep0 maxpacket: 16 [ 141.537396][ T851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 141.570712][ T851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59383, setting to 1024 [ 141.590685][ T851] usb 3-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 141.605338][ T851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.633127][ T851] usb 3-1: config 0 descriptor?? [ 141.641897][ T7195] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 142.059552][ T851] topre 0003:0853:0148.000D: unknown main item tag 0x2 [ 142.080757][ T851] topre 0003:0853:0148.000D: item fetching failed at offset 8/164 [ 142.089387][ T851] topre 0003:0853:0148.000D: probe with driver topre failed with error -22 [ 142.167315][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x003B. [ 142.178606][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 142.186625][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 142.194730][ T5491] etas_es58x 2-1:0.2 can1: bit-timing not yet defined [ 142.259043][ T24] usb 3-1: USB disconnect, device number 40 [ 142.262820][ T851] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 142.426224][ T851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.440961][ T851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.460676][ T851] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 142.469780][ T851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.501502][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 142.510791][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 142.520028][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 142.529264][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 142.538498][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 142.547767][ C0] etas_es58x 2-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 142.648415][ T9] usb 2-1: USB disconnect, device number 33 [ 142.651620][ T5491] etas_es58x 2-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 142.657530][ T9] etas_es58x 2-1:0.2: Disconnecting syz syz [ 142.671928][ T851] usb 5-1: config 0 descriptor?? [ 143.094328][ T851] bigben 0003:146B:0902.000E: unexpected rdesc, please submit for review [ 143.120942][ T851] bigben 0003:146B:0902.000E: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.4-1/input0 [ 143.180680][ T851] bigben 0003:146B:0902.000E: not enough fields in HID_OUTPUT_REPORT 0 [ 143.229612][ T851] bigben 0003:146B:0902.000E: no output report found [ 143.880875][ T24] usb 5-1: USB disconnect, device number 17 [ 144.030990][ T794] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 144.070666][ T5871] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 144.224946][ T794] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.230746][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 144.251414][ T794] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.261758][ T794] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 144.271094][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 144.276035][ T5871] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 144.288456][ T794] usb 2-1: SerialNumber: syz [ 144.293232][ T5871] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 144.332858][ T5871] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 144.360684][ T5871] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 144.369072][ T5871] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 144.388498][ T5871] usb 4-1: config 0 has no interface number 0 [ 144.395162][ T5871] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 144.427879][ T5871] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 144.440678][ T5871] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid maxpacket 65517, setting to 64 [ 144.462734][ T5871] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.480897][ T5871] usb 4-1: config 0 interface 125 has no altsetting 0 [ 144.488172][ T5871] usb 4-1: config 0 interface 125 has no altsetting 2 [ 144.502253][ T5871] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 144.512578][ T794] usb 2-1: skipping empty audio interface (v1) [ 144.524635][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.560642][ T5871] usb 4-1: Product: syz [ 144.570737][ T5871] usb 4-1: Manufacturer: syz [ 144.582468][ T5871] usb 4-1: SerialNumber: syz [ 144.585017][ T794] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 144.604746][ T5871] usb 4-1: config 0 descriptor?? [ 144.614597][ T794] usb 2-1: USB disconnect, device number 34 [ 144.623293][ T5871] usb 4-1: selecting invalid altsetting 2 [ 144.630710][ T5924] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 144.671849][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.780772][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 144.791973][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.803207][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.814753][ T5924] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 144.823890][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.834974][ T5924] usb 3-1: config 0 descriptor?? [ 144.864733][ C0] usb 4-1: async_complete: urb error -71 [ 144.870598][ C0] usb 4-1: async_complete: urb error -71 [ 144.876360][ C0] usb 4-1: async_complete: urb error -71 [ 144.882095][ C0] usb 4-1: async_complete: urb error -71 [ 144.889711][ T851] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 144.910403][ T5871] get_1284_register: usb error -71 [ 144.916438][ T5871] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 144.937426][ T5871] usb 4-1: USB disconnect, device number 27 [ 144.969543][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.981977][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.061167][ T851] usb 5-1: Using ep0 maxpacket: 16 [ 145.077210][ T851] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 145.094525][ T851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 145.108896][ T851] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 145.118937][ T851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.127151][ T851] usb 5-1: Product: syz [ 145.131424][ T851] usb 5-1: Manufacturer: syz [ 145.136032][ T851] usb 5-1: SerialNumber: syz [ 145.144180][ T851] usb 5-1: config 0 descriptor?? [ 145.152932][ T851] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 145.162333][ T851] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 145.248462][ T5924] ft260 0003:0403:6030.000F: unknown main item tag 0x7 [ 145.280905][ T5871] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 145.340763][ T5825] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 145.410824][ T5871] usb 4-1: device descriptor read/64, error -71 [ 145.445011][ T5924] ft260 0003:0403:6030.000F: chip code: 6424 8183 [ 145.482532][ T851] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 145.490179][ T851] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 145.498892][ T851] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 145.506733][ T851] em28xx 5-1:0.0: No AC97 audio processor [ 145.513840][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.529683][ T851] usb 5-1: USB disconnect, device number 18 [ 145.540724][ T5825] usb 2-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 145.552776][ T851] em28xx 5-1:0.0: Disconnecting em28xx [ 145.558668][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.567386][ T851] em28xx 5-1:0.0: Freeing device [ 145.581840][ T5825] usb 2-1: config 0 descriptor?? [ 145.654767][ T5924] ft260 0003:0403:6030.000F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 145.670721][ T5871] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 145.800524][ T7264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.809499][ T7264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.811575][ T5871] usb 4-1: device descriptor read/64, error -71 [ 145.855438][ T5924] ft260 0003:0403:6030.000F: failed to retrieve status: -32, no wakeup [ 145.936810][ T5871] usb usb4-port1: attempt power cycle [ 146.034151][ T5825] usbhid 2-1:0.0: can't add hid device: -71 [ 146.043429][ T5825] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 146.081630][ T5825] usb 2-1: USB disconnect, device number 35 [ 146.134964][ T24] usb 3-1: USB disconnect, device number 41 [ 146.286516][ T5871] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 146.321246][ T5871] usb 4-1: device descriptor read/8, error -71 [ 146.354241][ T7279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.307'. [ 146.491594][ T7282] vxcan1 speed is unknown, defaulting to 1000 [ 146.606994][ T5871] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 146.641141][ T5871] usb 4-1: device descriptor read/8, error -71 [ 146.752424][ T5871] usb usb4-port1: unable to enumerate USB device [ 146.860917][ T5924] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 146.892560][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 146.901797][ T7300] netlink: 5 bytes leftover after parsing attributes in process `syz.2.312'. [ 146.911035][ T7300] .30XD: renamed from macvtap0 (while UP) [ 146.925032][ T7300] .30XD: entered allmulticast mode [ 146.931390][ T7300] veth0_macvtap: entered allmulticast mode [ 146.937819][ T7300] A link change request failed with some changes committed already. Interface .30XD may have been left with an inconsistent configuration, please check. [ 146.954036][ T7297] syzkaller1: entered promiscuous mode [ 146.960325][ T7297] syzkaller1: entered allmulticast mode [ 147.010755][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 147.017952][ T5924] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 147.026951][ T5924] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 147.035537][ T5924] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 147.044700][ T5924] usb 5-1: config 250 has no interface number 0 [ 147.051284][ T5924] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 147.063876][ T5924] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 147.074457][ T5924] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.080722][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 147.084856][ T5924] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 147.100316][ T5924] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 147.121105][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.139428][ T5924] usb 5-1: config 250 interface 228 has no altsetting 0 [ 147.158022][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.169548][ T5924] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 147.172184][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 147.188870][ T9] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 147.198919][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 147.207787][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.217394][ T5924] usb 5-1: Product: syz [ 147.224165][ T5924] usb 5-1: SerialNumber: syz [ 147.303621][ T9] usb 2-1: config 0 descriptor?? [ 147.310425][ T5924] hub 5-1:250.228: bad descriptor, ignoring hub [ 147.329368][ T5924] hub 5-1:250.228: probe with driver hub failed with error -5 [ 147.459352][ T5924] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 19 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 147.505440][ T5924] usb 5-1: USB disconnect, device number 19 [ 147.527417][ T5924] usblp0: removed [ 147.722795][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 147.728933][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 147.739802][ T9] usb 2-1: USB disconnect, device number 36 [ 148.291742][ T5825] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 148.315924][ T7319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.345721][ T7319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.440842][ T794] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 148.460873][ T5825] usb 5-1: Using ep0 maxpacket: 16 [ 148.468152][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 148.480389][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.494453][ T5825] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 148.503577][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.513601][ T5825] usb 5-1: config 0 descriptor?? [ 148.550836][ T9] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 148.602452][ T794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.610676][ T5871] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 148.612862][ T794] usb 3-1: config 0 interface 0 has no altsetting 0 [ 148.629186][ T794] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 148.638307][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.646386][ T794] usb 3-1: Product: syz [ 148.650563][ T794] usb 3-1: Manufacturer: syz [ 148.655307][ T794] usb 3-1: SerialNumber: syz [ 148.662903][ T794] usb 3-1: config 0 descriptor?? [ 148.671856][ T794] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 148.685526][ T794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.695761][ T794] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 148.705666][ T794] usb 3-1: media controller created [ 148.712876][ T9] usb 2-1: device descriptor read/all, error -61 [ 148.723432][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.771674][ T794] DVB: Unable to find symbol tda10046_attach() [ 148.773016][ T5871] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.777870][ T794] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 148.777892][ T794] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 148.809214][ T5871] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.816114][ T5871] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 148.825264][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.836184][ T5871] usb 4-1: config 0 descriptor?? [ 148.860783][ T9] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 148.937714][ T5825] playstation 0003:054C:0DF2.0010: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 149.001094][ T9] usb 2-1: device descriptor read/64, error -71 [ 149.112669][ T9] usb usb2-port1: attempt power cycle [ 149.131787][ T5825] playstation 0003:054C:0DF2.0010: Invalid reportID received, expected 9 got 53 [ 149.141303][ T5825] playstation 0003:054C:0DF2.0010: Failed to retrieve DualSense pairing info: -22 [ 149.150704][ T5825] playstation 0003:054C:0DF2.0010: Failed to get MAC address from DualSense [ 149.159481][ T5825] playstation 0003:054C:0DF2.0010: Failed to create dualsense. [ 149.171800][ T5825] playstation 0003:054C:0DF2.0010: probe with driver playstation failed with error -22 [ 149.249885][ T5871] playstation 0003:054C:05C4.0011: unknown main item tag 0x0 [ 149.257630][ T5871] playstation 0003:054C:05C4.0011: unknown main item tag 0x0 [ 149.265157][ T5871] playstation 0003:054C:05C4.0011: unknown main item tag 0x0 [ 149.272933][ T5871] playstation 0003:054C:05C4.0011: unknown main item tag 0x0 [ 149.280350][ T5871] playstation 0003:054C:05C4.0011: unknown main item tag 0x0 [ 149.287889][ T5871] playstation 0003:054C:05C4.0011: unknown main item tag 0x0 [ 149.295481][ T5871] playstation 0003:054C:05C4.0011: unknown main item tag 0x0 [ 149.305428][ T5871] playstation 0003:054C:05C4.0011: hidraw0: USB HID v40.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 149.339073][ T24] usb 5-1: USB disconnect, device number 20 [ 149.460732][ T9] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 149.491384][ T9] usb 2-1: device descriptor read/8, error -71 [ 149.543933][ T5871] playstation 0003:054C:05C4.0011: Failed to retrieve feature with reportID 18: -71 [ 149.554178][ T5871] playstation 0003:054C:05C4.0011: Failed to retrieve DualShock4 pairing info: -71 [ 149.563695][ T5871] playstation 0003:054C:05C4.0011: Failed to get MAC address from DualShock4 [ 149.574152][ T5871] playstation 0003:054C:05C4.0011: Failed to create dualshock4. [ 149.584669][ T5871] playstation 0003:054C:05C4.0011: probe with driver playstation failed with error -71 [ 149.600331][ T5871] usb 4-1: USB disconnect, device number 32 [ 149.740715][ T9] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 149.761302][ T9] usb 2-1: device descriptor read/8, error -71 [ 149.877719][ T9] usb usb2-port1: unable to enumerate USB device [ 149.892504][ T794] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 149.918887][ T794] usb 3-1: USB disconnect, device number 42 [ 150.140711][ T5924] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 150.189392][ T7335] syz.3.323 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 150.310726][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 150.317566][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.327964][ T5924] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 255, using maximum allowed: 30 [ 150.339629][ T5924] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 150.352930][ T5924] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.359571][ T5924] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 150.368689][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.379580][ T5924] usb 5-1: config 0 descriptor?? [ 150.388098][ T5924] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 150.592440][ T5924] usb 5-1: USB disconnect, device number 21 [ 151.050712][ T5871] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 151.202459][ T5871] usb 4-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 151.213889][ T5871] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.223744][ T5871] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 151.233130][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.245538][ T5871] usb 4-1: config 0 descriptor?? [ 151.520871][ T5871] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 151.568695][ T7355] netlink: 352 bytes leftover after parsing attributes in process `syz.2.331'. [ 151.595939][ T7355] netlink: 352 bytes leftover after parsing attributes in process `syz.2.331'. [ 151.685406][ T5871] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.691126][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.332'. [ 151.708372][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.731725][ T5871] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.741417][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 151.749827][ T5871] usb 5-1: SerialNumber: syz [ 151.978732][ T5871] usb 5-1: 0:2 : does not exist [ 151.999698][ T5871] usb 5-1: USB disconnect, device number 22 [ 152.037167][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.080775][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 152.237316][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 152.246409][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.254691][ T9] usb 2-1: Product: syz [ 152.258985][ T9] usb 2-1: Manufacturer: syz [ 152.263711][ T9] usb 2-1: SerialNumber: syz [ 152.270142][ T9] usb 2-1: config 0 descriptor?? [ 152.277703][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 152.620931][ T851] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 152.682503][ T7375] FAULT_INJECTION: forcing a failure. [ 152.682503][ T7375] name failslab, interval 1, probability 0, space 0, times 1 [ 152.696216][ T7375] CPU: 1 UID: 0 PID: 7375 Comm: syz.4.337 Not tainted syzkaller #0 PREEMPT(full) [ 152.696241][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.696253][ T7375] Call Trace: [ 152.696260][ T7375] [ 152.696268][ T7375] dump_stack_lvl+0x189/0x250 [ 152.696304][ T7375] ? __pfx____ratelimit+0x10/0x10 [ 152.696332][ T7375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.696355][ T7375] ? __pfx__printk+0x10/0x10 [ 152.696382][ T7375] ? __pfx___might_resched+0x10/0x10 [ 152.696408][ T7375] should_fail_ex+0x414/0x560 [ 152.696439][ T7375] should_failslab+0xa8/0x100 [ 152.696468][ T7375] __kmalloc_noprof+0xdf/0x800 [ 152.696491][ T7375] ? kfree+0x4d/0x6e0 [ 152.696509][ T7375] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 152.696539][ T7375] tomoyo_realpath_from_path+0xe3/0x5d0 [ 152.696565][ T7375] ? tomoyo_domain+0xd8/0x130 [ 152.696595][ T7375] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 152.696615][ T7375] tomoyo_path_number_perm+0x1e8/0x5a0 [ 152.696638][ T7375] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 152.696705][ T7375] ? __fget_files+0x2a/0x420 [ 152.696730][ T7375] ? __fget_files+0x3a0/0x420 [ 152.696750][ T7375] ? __fget_files+0x2a/0x420 [ 152.696776][ T7375] security_file_ioctl+0xcb/0x2d0 [ 152.696798][ T7375] __se_sys_ioctl+0x47/0x170 [ 152.696815][ T7375] do_syscall_64+0xfa/0xfa0 [ 152.696826][ T7375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.696836][ T7375] ? clear_bhb_loop+0x60/0xb0 [ 152.696848][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.696858][ T7375] RIP: 0033:0x7f68e778f6c9 [ 152.696873][ T7375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.696882][ T7375] RSP: 002b:00007f68e86aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.696894][ T7375] RAX: ffffffffffffffda RBX: 00007f68e79e5fa0 RCX: 00007f68e778f6c9 [ 152.696902][ T7375] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000011 [ 152.696909][ T7375] RBP: 00007f68e86aa090 R08: 0000000000000000 R09: 0000000000000000 [ 152.696916][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.696921][ T7375] R13: 00007f68e79e6038 R14: 00007f68e79e5fa0 R15: 00007ffe42b6b268 [ 152.696941][ T7375] [ 152.696946][ T7375] ERROR: Out of memory at tomoyo_realpath_from_path. [ 152.780703][ T851] usb 3-1: Using ep0 maxpacket: 32 [ 152.935819][ T9] gspca_sunplus: reg_r err -71 [ 152.941276][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 152.951300][ T851] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 152.959515][ T851] usb 3-1: config 0 has no interface number 0 [ 152.967367][ T9] usb 2-1: USB disconnect, device number 41 [ 152.977820][ T851] usb 3-1: config 0 interface 125 has no altsetting 0 [ 152.987411][ T851] usb 3-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 152.997077][ T851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.005800][ T851] usb 3-1: Product: syz [ 153.010095][ T851] usb 3-1: Manufacturer: syz [ 153.015979][ T851] usb 3-1: SerialNumber: syz [ 153.024092][ T851] usb 3-1: config 0 descriptor?? [ 153.242466][ T851] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 153.252726][ T5825] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz1 [ 153.332569][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 153.435372][ T7380] syz.2.335: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 153.451158][ T7380] CPU: 0 UID: 0 PID: 7380 Comm: syz.2.335 Not tainted syzkaller #0 PREEMPT(full) [ 153.451181][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.451193][ T7380] Call Trace: [ 153.451200][ T7380] [ 153.451207][ T7380] dump_stack_lvl+0x189/0x250 [ 153.451236][ T7380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.451257][ T7380] ? __pfx__printk+0x10/0x10 [ 153.451277][ T7380] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 153.451306][ T7380] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 153.451337][ T7380] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 153.451365][ T7380] warn_alloc+0x214/0x310 [ 153.451388][ T7380] ? stack_trace_save+0x9c/0xe0 [ 153.451413][ T7380] ? __pfx_warn_alloc+0x10/0x10 [ 153.451440][ T7380] ? kasan_save_track+0x4f/0x80 [ 153.451459][ T7380] ? kasan_save_track+0x3e/0x80 [ 153.451478][ T7380] ? __kasan_kmalloc+0x93/0xb0 [ 153.451497][ T7380] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 153.451517][ T7380] ? xskq_create+0x56/0x170 [ 153.451539][ T7380] ? xsk_setsockopt+0x4dc/0x8d0 [ 153.451558][ T7380] ? do_sock_setsockopt+0x17c/0x1b0 [ 153.451580][ T7380] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 153.451600][ T7380] ? do_syscall_64+0xfa/0xfa0 [ 153.451622][ T7380] __vmalloc_node_range_noprof+0x134/0x1640 [ 153.451670][ T7380] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 153.451697][ T7380] ? __kasan_kmalloc+0x93/0xb0 [ 153.451723][ T7380] vmalloc_user_noprof+0xad/0xf0 [ 153.451743][ T7380] ? xskq_create+0xbf/0x170 [ 153.451766][ T7380] xskq_create+0xbf/0x170 [ 153.451790][ T7380] xsk_init_queue+0xb0/0x110 [ 153.451814][ T7380] xsk_setsockopt+0x4dc/0x8d0 [ 153.451837][ T7380] ? __pfx_xsk_setsockopt+0x10/0x10 [ 153.451861][ T7380] ? __pfx_aa_sk_perm+0x10/0x10 [ 153.451881][ T7380] ? aa_sock_opt_perm+0xff/0x1b0 [ 153.451910][ T7380] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 153.451931][ T7380] ? __pfx_xsk_setsockopt+0x10/0x10 [ 153.451953][ T7380] do_sock_setsockopt+0x17c/0x1b0 [ 153.451979][ T7380] __x64_sys_setsockopt+0x13f/0x1b0 [ 153.452006][ T7380] do_syscall_64+0xfa/0xfa0 [ 153.452022][ T7380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.452038][ T7380] ? clear_bhb_loop+0x60/0xb0 [ 153.452057][ T7380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.452072][ T7380] RIP: 0033:0x7fb35df8f6c9 [ 153.452087][ T7380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.452101][ T7380] RSP: 002b:00007fb35ee13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 153.452119][ T7380] RAX: ffffffffffffffda RBX: 00007fb35e1e6090 RCX: 00007fb35df8f6c9 [ 153.452132][ T7380] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 153.452141][ T7380] RBP: 00007fb35e011f91 R08: 0000000000000004 R09: 0000000000000000 [ 153.452152][ T7380] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 153.452162][ T7380] R13: 00007fb35e1e6128 R14: 00007fb35e1e6090 R15: 00007ffded48add8 [ 153.452188][ T7380] [ 153.452242][ T7380] Mem-Info: [ 153.753303][ T7380] active_anon:7638 inactive_anon:0 isolated_anon:0 [ 153.753303][ T7380] active_file:12979 inactive_file:41447 isolated_file:0 [ 153.753303][ T7380] unevictable:768 dirty:128 writeback:0 [ 153.753303][ T7380] slab_reclaimable:10977 slab_unreclaimable:97891 [ 153.753303][ T7380] mapped:26192 shmem:1364 pagetables:1281 [ 153.753303][ T7380] sec_pagetables:0 bounce:0 [ 153.753303][ T7380] kernel_misc_reclaimable:0 [ 153.753303][ T7380] free:1322979 free_pcp:13684 free_cma:0 [ 153.799238][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 153.804637][ T7380] Node 0 active_anon:26552kB inactive_anon:0kB active_file:51916kB inactive_file:159588kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104768kB dirty:512kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12028kB pagetables:4972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 153.837231][ T7380] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 153.869615][ T7380] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 153.900181][ T7380] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 153.906168][ T7380] Node 0 DMA32 free:1402108kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25152kB inactive_anon:0kB active_file:51916kB inactive_file:159588kB unevictable:1536kB writepending:512kB zspages:0kB present:3129332kB managed:2551628kB mlocked:0kB bounce:0kB free_pcp:41728kB local_pcp:24928kB free_cma:0kB [ 153.910684][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 153.962688][ T5924] usb 4-1: USB disconnect, device number 33 [ 153.970205][ T7380] lowmem_reserve[]: 0 0 0 0 0 [ 153.995547][ T7380] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 154.028592][ T851] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 154.044403][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.056793][ T9] usb 5-1: config 0 has no interface number 0 [ 154.063146][ T7380] lowmem_reserve[]: 0 0 0 0 0 [ 154.068802][ T7380] Node 1 Normal free:3874448kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24576kB local_pcp:9760kB free_cma:0kB [ 154.127465][ T7380] lowmem_reserve[]: 0 0 0 [ 154.128171][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=ce.6f [ 154.143356][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.157291][ T7380] 0 0 [ 154.160352][ T9] usb 5-1: Product: syz [ 154.164853][ T7380] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 154.178361][ T9] usb 5-1: Manufacturer: syz [ 154.184654][ T9] usb 5-1: SerialNumber: syz [ 154.189672][ T7393] netlink: 48 bytes leftover after parsing attributes in process `syz.1.343'. [ 154.201990][ T9] usb 5-1: config 0 descriptor?? [ 154.207246][ T851] usb 3-1: device descriptor read/64, error -71 [ 154.219335][ T7380] Node 0 DMA32: 2599*4kB (UME) 1378*8kB (UME) 378*16kB (UME) 182*32kB (UME) 162*64kB (UME) 106*128kB (M) 85*256kB (UM) 30*512kB (UM) 12*1024kB (ME) 9*2048kB (UME) 312*4096kB (M) = 1403020kB [ 154.230486][ T7393] cgroup: No subsys list or none specified [ 154.242353][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 154.255424][ T7380] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 154.267125][ T7380] Node 1 Normal: 212*4kB (UE) 50*8kB (UME) 41*16kB (UME) 55*32kB (UME) 25*64kB (UME) 6*128kB (UME) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 942*4096kB (M) = 3874448kB [ 154.287385][ T7380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.300171][ T7380] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.311801][ T7380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.322323][ T7380] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.345935][ T7380] 54286 total pagecache pages [ 154.350824][ T7380] 0 pages in swap cache [ 154.355216][ T7380] Free swap = 124996kB [ 154.359474][ T7380] Total swap = 124996kB [ 154.364384][ T7380] 2097051 pages RAM [ 154.368348][ T7380] 0 pages HighMem/MovableOnly [ 154.373169][ T7380] 427374 pages reserved [ 154.377338][ T7380] 0 pages cma reserved [ 154.423335][ T9] usb 5-1: qt2_attach - failed to power on unit: -71 [ 154.430186][ T9] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 154.448241][ T9] usb 5-1: USB disconnect, device number 23 [ 154.451790][ T5924] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 154.470807][ T851] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 154.600753][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 154.610737][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 154.611011][ T851] usb 3-1: device descriptor read/64, error -71 [ 154.626020][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.638555][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 154.650413][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.662206][ T5924] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 154.671787][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.681875][ T5924] usb 4-1: config 0 descriptor?? [ 154.687684][ T7392] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 154.696673][ T5924] hub 4-1:0.0: USB hub found [ 154.782310][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.793346][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.803174][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 154.812340][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.822779][ T24] usb 2-1: config 0 descriptor?? [ 154.861128][ T851] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 154.891442][ T851] usb 3-1: device descriptor read/8, error -71 [ 154.901641][ T5924] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 154.913557][ T5924] usbhid 4-1:0.0: can't add hid device: -71 [ 154.919593][ T5924] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 154.948563][ T5924] usb 4-1: USB disconnect, device number 34 [ 155.043881][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.053151][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.136436][ T851] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 155.162164][ T851] usb 3-1: device descriptor read/8, error -71 [ 155.188017][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 155.194363][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 155.204618][ T24] usb 2-1: USB disconnect, device number 42 [ 155.284931][ T851] ueagle-atm 3-1:0.125: usbatm_usb_probe: bind failed: -19! [ 155.297540][ T851] usb 3-1: USB disconnect, device number 43 [ 155.431038][ T851] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 155.791047][ T851] usb 3-1: device descriptor read/64, error -71 [ 155.833068][ T24] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 155.993532][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 156.002397][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 156.011751][ T24] usb 4-1: config 106 has an invalid interface number: 8 but max is 0 [ 156.020568][ T24] usb 4-1: config 106 has no interface number 0 [ 156.028015][ T24] usb 4-1: config 106 interface 8 has no altsetting 0 [ 156.038149][ T24] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 156.040671][ T851] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 156.047798][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.064544][ T24] usb 4-1: Product: syz [ 156.068732][ T24] usb 4-1: Manufacturer: syz [ 156.077270][ T24] usb 4-1: SerialNumber: syz [ 156.210719][ T5924] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 156.221753][ T851] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.232048][ T851] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.251598][ T851] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 156.260738][ T851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.268937][ T851] usb 3-1: SerialNumber: syz [ 156.289725][ T7405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.306737][ T7405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.321681][ T24] kalmia 4-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 156.342873][ T24] kalmia 4-1:106.8: probe with driver kalmia failed with error -22 [ 156.361115][ T24] usb 4-1: USB disconnect, device number 35 [ 156.371383][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.399890][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.429585][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.443075][ T5924] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.453798][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.471685][ T5924] usb 2-1: config 0 descriptor?? [ 156.512422][ T851] usb 3-1: 0:2 : does not exist [ 156.554262][ T851] usb 3-1: USB disconnect, device number 45 [ 156.596382][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.689538][ T7415] fuse: Bad value for 'fd' [ 156.911762][ T5924] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 157.037774][ T981] usb 2-1: USB disconnect, device number 43 [ 157.209897][ T7423] netlink: 'syz.2.354': attribute type 1 has an invalid length. [ 157.310665][ T24] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 157.472285][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.482630][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 157.493880][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.504513][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 157.519805][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 157.528904][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 157.537026][ T24] usb 5-1: Manufacturer: syz [ 157.550693][ T24] usb 5-1: config 0 descriptor?? [ 157.896126][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.917553][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.974258][ T7442] qrtr: Invalid version 4 [ 157.974293][ T7443] qrtr: Invalid version 4 [ 158.081040][ T24] rc_core: IR keymap rc-hauppauge not found [ 158.093186][ T24] Registered IR keymap rc-empty [ 158.098834][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.130862][ T981] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 158.138621][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.163618][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 158.188097][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 158.203202][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.221041][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.240768][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.260755][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.280753][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.290823][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 158.298167][ T981] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 158.306951][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.320664][ T981] usb 4-1: config 0 has no interface number 0 [ 158.349182][ T981] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 158.358727][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.376050][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.385162][ T981] usb 4-1: Product: syz [ 158.389421][ T981] usb 4-1: Manufacturer: syz [ 158.396245][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.405962][ T981] usb 4-1: SerialNumber: syz [ 158.417914][ T981] usb 4-1: config 0 descriptor?? [ 158.426667][ T981] hub 4-1:0.145: bad descriptor, ignoring hub [ 158.432998][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.450549][ T981] hub 4-1:0.145: probe with driver hub failed with error -5 [ 158.461516][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 158.474780][ T981] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.145/input/input21 [ 158.488074][ T24] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 158.499053][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 158.525944][ T981] input: failed to attach handler mousedev to device input21, error: -2 [ 158.539868][ T24] usb 5-1: USB disconnect, device number 24 [ 158.623114][ T851] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 158.791146][ T7460] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 158.807012][ T851] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.823002][ T851] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.836890][ T851] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.850531][ T851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.859435][ T851] usb 2-1: SerialNumber: syz [ 159.040786][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 159.059457][ T7469] process 'syz.4.370' launched './file1' with NULL argv: empty string added [ 159.082976][ T851] usb 2-1: 0:2 : does not exist [ 159.133967][ T851] usb 2-1: USB disconnect, device number 44 [ 159.188911][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.210684][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 159.232777][ T24] usb 3-1: config 1 has an invalid interface number: 4 but max is 2 [ 159.255225][ T24] usb 3-1: config 1 has no interface number 1 [ 159.265150][ T24] usb 3-1: too many endpoints for config 1 interface 4 altsetting 17: 195, using maximum allowed: 30 [ 159.286428][ T24] usb 3-1: config 1 interface 4 altsetting 17 has 0 endpoint descriptors, different from the interface descriptor's value: 195 [ 159.316228][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 159.345052][ T24] usb 3-1: config 1 interface 4 has no altsetting 0 [ 159.365086][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.380681][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.384755][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.374'. [ 159.400666][ T24] usb 3-1: Product: syz [ 159.403678][ T7483] netlink: 80 bytes leftover after parsing attributes in process `syz.3.374'. [ 159.412488][ T24] usb 3-1: Manufacturer: syz [ 159.418555][ T24] usb 3-1: SerialNumber: syz [ 159.636912][ T7466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.645827][ T7466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.666828][ T24] usb 3-1: 2:1 : unsupported sample bitwidth 9 in 5 bytes [ 159.682371][ T24] hub 3-1:1.4: Invalid hub with more than one config or interface [ 159.690244][ T24] hub 3-1:1.4: probe with driver hub failed with error -22 [ 159.706535][ T24] usb 3-1: USB disconnect, device number 46 [ 159.743264][ T981] usb 4-1: USB disconnect, device number 36 [ 159.766167][ T851] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 159.940694][ T981] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 159.953715][ T851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 159.965074][ T851] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 159.974531][ T851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.985515][ T851] usb 5-1: config 0 descriptor?? [ 159.991624][ T7487] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.092590][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.103978][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.114031][ T981] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 160.124530][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.135741][ T981] usb 4-1: config 0 descriptor?? [ 160.439853][ T851] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0014/input/input22 [ 160.559246][ T981] glorious 0003:258A:0036.0015: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.3-1/input0 [ 160.564103][ T851] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0014/input/input23 [ 160.643523][ T851] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0014/input/input24 [ 160.746801][ T851] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0014/input/input25 [ 160.850701][ T851] hid-udraw 0003:20D6:CB17.0014: hidraw1: USB HID vff.f8 Device [HID 20d6:cb17] on usb-dummy_hcd.4-1/input0 [ 160.905172][ T7511] mmap: syz.2.382 (7511) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 160.927223][ T851] usb 5-1: USB disconnect, device number 25 [ 160.998206][ T981] usb 4-1: USB disconnect, device number 37 [ 161.017384][ T7512] fido_id[7512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 161.582554][ T7523] veth1_macvtap: entered allmulticast mode [ 161.630179][ T7528] siw: device registration error -23 [ 161.670836][ T981] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 161.831318][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 161.842286][ T981] usb 2-1: config 0 has no interfaces? [ 161.847840][ T981] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 161.865048][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.878182][ T981] usb 2-1: config 0 descriptor?? [ 162.088649][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.099037][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.112069][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.171049][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.203061][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.227970][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.266362][ T981] usb 2-1: USB disconnect, device number 45 [ 162.370071][ T7544] netlink: 'syz.3.395': attribute type 2 has an invalid length. [ 162.521308][ T9] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 162.673009][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 162.682736][ T9] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x88 has invalid maxpacket 32, setting to 8 [ 162.693537][ T9] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x83 is Bulk; changing to Interrupt [ 162.705220][ T9] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 162.715167][ T9] usb 5-1: config 8 interface 0 has no altsetting 0 [ 162.720695][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 162.740716][ T981] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 162.881525][ T24] usb 2-1: too many configurations: 99, using maximum allowed: 8 [ 162.891126][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 162.896438][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 162.904251][ T24] usb 2-1: can't read configurations, error -61 [ 162.914377][ T981] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.927893][ T981] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.935753][ T981] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 162.945101][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.956173][ T981] usb 3-1: config 0 descriptor?? [ 163.040860][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 163.211581][ T24] usb 2-1: too many configurations: 99, using maximum allowed: 8 [ 163.221517][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 163.229178][ T24] usb 2-1: can't read configurations, error -61 [ 163.236101][ T24] usb usb2-port1: attempt power cycle [ 163.366039][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.375100][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.386052][ T981] elecom 0003:056E:010C.0016: unknown main item tag 0x0 [ 163.394030][ T981] elecom 0003:056E:010C.0016: unknown main item tag 0x0 [ 163.401656][ T981] elecom 0003:056E:010C.0016: unknown main item tag 0x0 [ 163.408819][ T981] elecom 0003:056E:010C.0016: unknown main item tag 0x0 [ 163.416069][ T981] elecom 0003:056E:010C.0016: unknown main item tag 0x0 [ 163.425640][ T981] elecom 0003:056E:010C.0016: hidraw0: USB HID v0.15 Device [HID 056e:010c] on usb-dummy_hcd.2-1/input0 [ 163.580800][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 163.585766][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.597422][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.601996][ T24] usb 2-1: too many configurations: 99, using maximum allowed: 8 [ 163.616379][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 163.630957][ T24] usb 2-1: can't read configurations, error -61 [ 163.760902][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 163.782021][ T24] usb 2-1: too many configurations: 99, using maximum allowed: 8 [ 163.807610][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.808422][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 163.823965][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.828052][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.844207][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.848980][ T24] usb 2-1: can't read configurations, error -61 [ 163.863549][ T24] usb usb2-port1: unable to enumerate USB device [ 163.883411][ T24] usb 3-1: USB disconnect, device number 47 [ 164.110703][ T5871] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 164.224296][ T7570] netlink: 'syz.2.403': attribute type 29 has an invalid length. [ 164.272360][ T5871] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 164.283463][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 164.296631][ T5871] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 164.305740][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.317162][ T5871] usb 4-1: config 0 descriptor?? [ 164.738646][ T5871] wacom 0003:056A:0315.0017: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 164.750904][ T5871] wacom 0003:056A:0315.0017: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.3-1/input0 [ 164.765573][ T5871] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0315.0017/input/input26 [ 164.835582][ T7569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.861672][ T7569] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.872115][ T7569] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.882575][ T7569] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.896209][ T7569] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.902849][ T7569] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 164.910394][ T7569] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 164.962331][ T5871] usb 4-1: USB disconnect, device number 38 [ 165.304296][ T9] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 165.330131][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.353949][ T9] usb 5-1: can't set config #8, error -71 [ 165.382948][ T9] usb 5-1: USB disconnect, device number 26 [ 165.444630][ T7587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.408'. [ 165.463885][ T7587] nbd: must specify at least one socket [ 165.820809][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 165.850732][ T5871] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 166.005912][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 166.015511][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.030657][ T9] usb 5-1: Product: syz [ 166.034866][ T9] usb 5-1: Manufacturer: syz [ 166.060891][ T9] usb 5-1: SerialNumber: syz [ 166.078600][ T5871] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 166.109420][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.136123][ T5871] usb 4-1: Product: syz [ 166.140470][ T5871] usb 4-1: Manufacturer: syz [ 166.151970][ T5871] usb 4-1: SerialNumber: syz [ 166.162219][ T5871] usb 4-1: config 0 descriptor?? [ 166.168376][ T7618] netlink: 763 bytes leftover after parsing attributes in process `syz.2.414'. [ 166.174706][ T5871] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 166.250745][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.520237][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 166.550732][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 166.729138][ T7635] openvswitch: netlink: Missing valid actions attribute. [ 166.738746][ T7635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.890795][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.896888][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.970800][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.463429][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 167.773445][ T7651] No source specified [ 167.788874][ T7592] syzkaller1: entered allmulticast mode [ 167.799051][ T5871] gspca_sunplus: reg_r err -71 [ 167.811413][ T5871] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 167.843896][ T5871] usb 4-1: USB disconnect, device number 39 [ 167.995965][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 168.033168][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 168.059581][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 168.071458][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 168.091770][ T9] usb 5-1: USB disconnect, device number 27 [ 168.835326][ T7678] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 168.843689][ T7678] VFS: Can't find a romfs filesystem on dev nullb0. [ 168.843689][ T7678] [ 168.920695][ T851] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 168.981006][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.011125][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 169.011269][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 169.012235][ T7682] netlink: 'syz.3.433': attribute type 21 has an invalid length. [ 169.028146][ T7682] netlink: 164 bytes leftover after parsing attributes in process `syz.3.433'. [ 169.051120][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.070724][ T851] usb 3-1: device descriptor read/64, error -71 [ 169.191309][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 169.198398][ T9] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 169.207103][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 169.215825][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 169.224097][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 169.232295][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 169.241222][ T9] usb 5-1: config 0 has no interface number 0 [ 169.247501][ T9] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 169.258689][ T9] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 169.269202][ T9] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 169.279603][ T9] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.292888][ T9] usb 5-1: config 0 interface 125 has no altsetting 0 [ 169.299671][ T9] usb 5-1: config 0 interface 125 has no altsetting 2 [ 169.308981][ T9] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 169.318098][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.326254][ T851] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 169.333925][ T9] usb 5-1: Product: syz [ 169.338103][ T9] usb 5-1: Manufacturer: syz [ 169.342929][ T9] usb 5-1: SerialNumber: syz [ 169.349855][ T9] usb 5-1: config 0 descriptor?? [ 169.357836][ T9] usb 5-1: selecting invalid altsetting 2 [ 169.480683][ T851] usb 3-1: device descriptor read/64, error -71 [ 169.590921][ T851] usb usb3-port1: attempt power cycle [ 169.724777][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 169.940924][ T851] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 169.971516][ T851] usb 3-1: device descriptor read/8, error -71 [ 170.011537][ T5825] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 170.185654][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 170.197705][ T5825] usb 4-1: unable to get BOS descriptor or descriptor too short [ 170.212028][ T5825] usb 4-1: config index 0 descriptor too short (expected 274, got 18) [ 170.220927][ T851] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 170.228769][ T5825] usb 4-1: config 8 interface 0 has no altsetting 0 [ 170.238910][ T5825] usb 4-1: New USB device found, idVendor=5fc9, idProduct=8f62, bcdDevice= f.ca [ 170.248858][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.257619][ T5825] usb 4-1: Product: syz [ 170.262678][ T851] usb 3-1: device descriptor read/8, error -71 [ 170.269081][ T5825] usb 4-1: Manufacturer: syz [ 170.273874][ T5825] usb 4-1: SerialNumber: syz [ 170.321856][ T7706] netlink: 'syz.1.441': attribute type 12 has an invalid length. [ 170.329722][ T7706] netlink: 132 bytes leftover after parsing attributes in process `syz.1.441'. [ 170.371155][ T851] usb usb3-port1: unable to enumerate USB device [ 170.371592][ T7676] netlink: 'syz.4.430': attribute type 2 has an invalid length. [ 170.386768][ T5821] ------------[ cut here ]------------ [ 170.387579][ T7676] netlink: 'syz.4.430': attribute type 2 has an invalid length. [ 170.392364][ T5821] WARNING: ./include/linux/ns_common.h:255 at free_nsproxy+0x415/0x560, CPU#0: syz-executor/5821 [ 170.408147][ T981] usb 5-1: USB disconnect, device number 28 [ 170.410917][ T5821] Modules linked in: [ 170.420538][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 170.430111][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.440767][ T5821] RIP: 0010:free_nsproxy+0x415/0x560 [ 170.446085][ T5821] Code: 85 ed 0f 8e be 00 00 00 e8 b8 33 33 00 48 8b 3d 91 38 32 11 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 81 34 8e 00 e8 9c 33 33 00 90 <0f> 0b 90 e9 ba fc ff ff e8 8e 33 33 00 4c 89 ff be 03 00 00 00 e8 [ 170.466102][ T5821] RSP: 0018:ffffc90003f4fcf0 EFLAGS: 00010293 [ 170.472294][ T5821] RAX: ffffffff818e2be4 RBX: ffff88801d6a31a0 RCX: ffff88807796bd00 [ 170.480329][ T5821] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 170.488518][ T5821] RBP: 00000000ffffffff R08: ffff88802631452b R09: 1ffff11004c628a5 [ 170.496786][ T5821] R10: dffffc0000000000 R11: ffffed1004c628a6 R12: dffffc0000000000 [ 170.504832][ T5821] R13: 0000000000000100 R14: ffff8880263142d8 R15: ffff888026314528 [ 170.513188][ T5821] FS: 0000000000000000(0000) GS:ffff888125a82000(0000) knlGS:0000000000000000 [ 170.522417][ T5821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.529026][ T5821] CR2: 00007ffdf8144dd8 CR3: 000000002ea6e000 CR4: 00000000003526f0 [ 170.537154][ T5821] Call Trace: [ 170.540444][ T5821] [ 170.543426][ T5821] do_exit+0x6b8/0x2300 [ 170.547600][ T5821] ? __pfx_do_exit+0x10/0x10 [ 170.552269][ T5821] ? _raw_spin_unlock_irq+0x23/0x50 [ 170.557484][ T5821] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.562725][ T5821] do_group_exit+0x21c/0x2d0 [ 170.567452][ T5821] __x64_sys_exit_group+0x3f/0x40 [ 170.572789][ T5821] x64_sys_call+0x2210/0x2210 [ 170.577486][ T5821] do_syscall_64+0xfa/0xfa0 [ 170.582021][ T5821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.588127][ T5821] ? clear_bhb_loop+0x60/0xb0 [ 170.592864][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.598777][ T5821] RIP: 0033:0x7fe15c78f6c9 [ 170.603262][ T5821] Code: Unable to access opcode bytes at 0x7fe15c78f69f. [ 170.610611][ T5821] RSP: 002b:00007ffdf8147458 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 170.619262][ T5821] RAX: ffffffffffffffda RBX: 00007fe15c811e01 RCX: 00007fe15c78f6c9 [ 170.627322][ T5821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 170.635825][ T5821] RBP: 000000000000000d R08: 00007ffdf81451f6 R09: 00007ffdf8148710 [ 170.643851][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf8148710 [ 170.652215][ T5821] R13: 00007fe15c811d7d R14: 0000555575be94a8 R15: 00007ffdf814a8d0 [ 170.660276][ T5821] [ 170.663525][ T5821] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 170.670815][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 170.680260][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.690331][ T5821] Call Trace: [ 170.693620][ T5821] [ 170.696546][ T5821] dump_stack_lvl+0x99/0x250 [ 170.701134][ T5821] ? __asan_memcpy+0x40/0x70 [ 170.705755][ T5821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.710980][ T5821] ? __pfx__printk+0x10/0x10 [ 170.715570][ T5821] vpanic+0x237/0x6d0 [ 170.719543][ T5821] ? __pfx_vpanic+0x10/0x10 [ 170.724032][ T5821] ? is_bpf_text_address+0x26/0x2b0 [ 170.729244][ T5821] panic+0xb9/0xc0 [ 170.732976][ T5821] ? __pfx_panic+0x10/0x10 [ 170.737460][ T5821] __warn+0x318/0x4d0 [ 170.741435][ T5821] ? free_nsproxy+0x415/0x560 [ 170.746111][ T5821] ? free_nsproxy+0x415/0x560 [ 170.750778][ T5821] report_bug+0x2be/0x4f0 [ 170.755107][ T5821] ? free_nsproxy+0x415/0x560 [ 170.759797][ T5821] ? free_nsproxy+0x415/0x560 [ 170.764463][ T5821] ? free_nsproxy+0x417/0x560 [ 170.769140][ T5821] handle_bug+0x84/0x160 [ 170.773377][ T5821] exc_invalid_op+0x1a/0x50 [ 170.777899][ T5821] asm_exc_invalid_op+0x1a/0x20 [ 170.782739][ T5821] RIP: 0010:free_nsproxy+0x415/0x560 [ 170.788022][ T5821] Code: 85 ed 0f 8e be 00 00 00 e8 b8 33 33 00 48 8b 3d 91 38 32 11 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 81 34 8e 00 e8 9c 33 33 00 90 <0f> 0b 90 e9 ba fc ff ff e8 8e 33 33 00 4c 89 ff be 03 00 00 00 e8 [ 170.807626][ T5821] RSP: 0018:ffffc90003f4fcf0 EFLAGS: 00010293 [ 170.813693][ T5821] RAX: ffffffff818e2be4 RBX: ffff88801d6a31a0 RCX: ffff88807796bd00 [ 170.821660][ T5821] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 170.829633][ T5821] RBP: 00000000ffffffff R08: ffff88802631452b R09: 1ffff11004c628a5 [ 170.837600][ T5821] R10: dffffc0000000000 R11: ffffed1004c628a6 R12: dffffc0000000000 [ 170.845576][ T5821] R13: 0000000000000100 R14: ffff8880263142d8 R15: ffff888026314528 [ 170.853548][ T5821] ? free_nsproxy+0x414/0x560 [ 170.858226][ T5821] do_exit+0x6b8/0x2300 [ 170.862387][ T5821] ? __pfx_do_exit+0x10/0x10 [ 170.866977][ T5821] ? _raw_spin_unlock_irq+0x23/0x50 [ 170.872170][ T5821] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.877361][ T5821] do_group_exit+0x21c/0x2d0 [ 170.881951][ T5821] __x64_sys_exit_group+0x3f/0x40 [ 170.886995][ T5821] x64_sys_call+0x2210/0x2210 [ 170.891667][ T5821] do_syscall_64+0xfa/0xfa0 [ 170.896182][ T5821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.902257][ T5821] ? clear_bhb_loop+0x60/0xb0 [ 170.906952][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.912840][ T5821] RIP: 0033:0x7fe15c78f6c9 [ 170.917251][ T5821] Code: Unable to access opcode bytes at 0x7fe15c78f69f. [ 170.924347][ T5821] RSP: 002b:00007ffdf8147458 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 170.932770][ T5821] RAX: ffffffffffffffda RBX: 00007fe15c811e01 RCX: 00007fe15c78f6c9 [ 170.940772][ T5821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 170.948733][ T5821] RBP: 000000000000000d R08: 00007ffdf81451f6 R09: 00007ffdf8148710 [ 170.956696][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf8148710 [ 170.964657][ T5821] R13: 00007fe15c811d7d R14: 0000555575be94a8 R15: 00007ffdf814a8d0 [ 170.972634][ T5821] [ 170.975963][ T5821] Kernel Offset: disabled [ 170.980272][ T5821] Rebooting in 86400 seconds..